Know what your AI actually does. Clear AI rules and documents built from what you really use, typically within one to three weeks.
Problem
We write your AI governance documentation from what you really have in use. No maturity assessment, no slide deck. Four short workshops, and then documents your leadership, architects and staff actually use. A platform build needs budget, a security review and a named owner before anyone has agreed what AI is for. Governance needs none of that, and it answers the question your board is already asking.
Approach
Not one thick policy nobody opens. Each document is written for the people who have to use it, and built from your own workshop answers rather than our template. Platform-neutral by construction: nothing in them presumes Bedrock, Foundry or Vertex.
Provider or deployer? What counts as high risk for you, and which deadlines apply. A short document everything else depends on. For legal and management.
Roles and responsibilities, lifecycle, risk tiers, human oversight, deviations, traceability and AI literacy. For leadership and auditors.
Agent identity, action permissions, logging, testing, rollback and the emergency stop. Autonomy level is a decision, not a setting. For architects and developers.
Which tools you may use, what you may put into them and what you stay responsible for yourself. Plain language, one page. For everyone.
Not a document but a register you keep up: system, owner, risk tier, autonomy level, obligations and next review. For the governance owner.
EU AI Act
The dates your governance model has to plan for, as they stand after the Digital Omnibus on AI.
2/2025
Prohibitions and AI literacy
Prohibited practices banned. Providers and deployers must support AI literacy among their staff.
8/2025
General-purpose AI
Obligations for providers of general-purpose AI models.
8/2026
Transparency
People must be told when they are dealing with AI, and some AI-generated content must be marked.
12/2027
High-risk systems, Annex III
Obligations for standalone high-risk systems, such as AI used in recruitment, credit or critical infrastructure.
8/2028
High-risk in regulated products
Obligations for AI embedded in products already covered by EU product-safety law, Annex I.
Dates per Regulation (EU) 2024/1689, as amended by the Digital Omnibus on AI, Regulation (EU) 2026/1744, which moved the high-risk deadlines (summary). Your assessment document says which of these actually bind you.
What This Takes From You
Typically one to three weeks from first meeting to signed-off documents, depending on how fast your people can meet. You bring the people and the answers. We write the documents.
2 hours
Scope, current AI use, and an honest look at the shadow AI already happening.
4 × 2 hours
Strategy and risk, data and residency, controls and oversight, roles and cadence.
1 day
Drafted from the workshop record, reviewed with you and signed off by a named business owner.
Price And Next Step
Starting from €4,000, typically within one to three weeks. If the model says build, the AI Landing Zone is priced against your own register, not our template. If it says wait, you still have the answer you needed.
Tells us which models, which data and which regions. It sizes the landing zone.
Tell us which guardrails are mandatory rather than nice to have.
Become the controls the platform enforces: identity, permissions, logging and rollback.
FAQ
Explore More
A ready-made, secured AI environment in your own cloud on AWS or Microsoft, with your rules built in and your first agents already running. Typically within two days.
Your AI platform in your own AWS or Microsoft cloud, kept safe and in budget. We run the cost controls, policies, security, guardrails and identity every month.
AI in production, under control. Three services: AI Governance sets the rules, Managed AI keeps the platform safe and in budget, and Managed Agents runs your agents in production.
Let's discuss how Cloud2's AI Governance Model service can help you achieve your goals.