From experimentation to responsible, scalable business value — an independent assessment of what your organisation can actually govern, measure and scale.
Artificial intelligence is already present in most organisations — embedded in productivity software, ERP and CRM platforms, or used informally by employees. The strategic question is no longer whether to use AI. It is where AI creates measurable value, which current uses are uncontrolled, which foundations are required, and which projects should not be pursued. This assessment answers those questions before major investment is committed.
Three formats depending on your scope — see below. The engagement starts after a first exchange that frames your decision.
The problem
Why pilots stay pilots
The difficulty is rarely launching an experiment. It is turning experimentation into a capability the organisation can govern, measure and scale. Initiatives typically stall for identifiable reasons:
×A solution was selected before the problem was defined
×Ownership is fragmented across business units, IT and individuals
×Management does not know which AI tools are already in use, or what data they receive
×Relevant data is incomplete, duplicated, inaccessible or spread across systems
×AI is introduced into processes that are inefficient or undocumented
×Legacy applications, limited APIs or vendor restrictions prevent integration
×Employees perceive AI as a threat rather than a support
×Nobody is accountable for validating outputs or handling incidents
×Licence fees are mistaken for total cost
×The pilot has no baseline, indicators or stop criteria
Approach
Eight principles for Nordic and European organisations
Nordic organisations operate in some of Europe's most digitally mature economies. That raises expectations rather than lowering them: AI initiatives must be useful, secure, transparent, proportionate, economically justified, understandable to users and compatible with organisational values. The assessment is built on eight principles:
✓Trust before acceleration
✓Participation before imposition
✓Business value before technology selection
✓Proportionality before complexity
✓Governance before scaling
✓Evidence before promises
✓Sustainability before uncontrolled consumption
✓European compliance by design
A process redesign, a search tool or conventional automation is sometimes more appropriate than a complex AI system. And a successful pilot does not automatically justify organisation-wide deployment.
Scope
Twelve dimensions, assessed separately
Maturity is rated on five levels, dimension by dimension. The overall score is never a simple average: critical weaknesses in security, data quality, human oversight, regulatory exposure or operational resilience may prevent an initiative from proceeding whatever the average says.
1Strategic relevance. Can AI support defined business priorities, and is there a simpler alternative?
2AI landscape and current-use inventory. Approved tools, AI embedded in existing software, and individual use.
3Data readiness. Availability, quality, legality of use, ownership, accessibility, representativeness.
4Process maturity. What can be automated, what can be assisted, what must remain human.
5Technology and integration. Architecture, APIs, supplier maturity, security, scalability.
6Security and confidentiality. Access, classification, incident handling, API security, monitoring.
7Regulatory exposure. Classification of uses under the EU AI Act, GDPR and documentation requirements.
8People and skills. Understanding, existing practice, training needs, resistance, key-person availability.
9Responsible AI and oversight. Transparency, human oversight, bias, explainability, accountability.
10Sustainability. Computing resources, hosting choices, data volumes, proportionality to value.
11Use-case portfolio. Opportunities identified from real business problems, then qualified.
Findings distinguish what is formalised, what is actually practised, what depends on individuals and what remains to be built.
Executive brief and full report
Current position, critical findings, opportunities, priority risks, recommended decisions and immediate actions.
AI maturity scorecard
For each dimension: current level, target level, critical gaps, priority, proposed owner and timeframe.
AI system and use register
System, use, owner, supplier, users, data, output, human oversight, risk level and status.
Use-case portfolio and prioritisation
Business problem, expected value, data readiness, feasibility, risks, effort, priority and recommendation — allocated across six categories from priority quick wins to excluded initiatives.
Risk register, cross-SWOT and governance model
Risks with cause, probability, impact, existing control, residual exposure, required action, owner and deadline; a governance model with approval gates; and an AI policy framework.
Roadmap, pilot charters and literacy plan
A 12–24 month roadmap with decision gates, pilot charters including stop and scale criteria, and a role-based AI literacy plan.
Preview
What the deliverable looks like
You receive an executive brief and a structured report, walked through together in a decision session. The previews below show its structure (Professional Assessment format).
Engagement scopeCurrent AI use and maturityUse cases, risks and regulationRoadmap, governance and pilot charterCross-border layer and deliverables
Representative anonymised sample. The actual deliverable is tailored to your context. Download the full PDF.
Regain control of current use: internal AI policy, stop exposed practices, appoint an accountable owner.
Horizon 2 · Prepare (1–4 months)
Make priority data trustworthy, document the processes concerned, deliver role-based AI literacy.
Horizon 3 · Experiment (4–9 months)
Run limited, measurable and reversible pilots with defined stop criteria and formal decision gates.
Horizon 4 · Scale (9–24 months)
Deploy validated solutions, integrate with core systems, consolidate governance, oversight and value measurement.
Cross-border
One core method, proportionate local adaptation
For multi-country organisations, a common core methodology is applied while recognising local differences. Group level covers strategy, architecture, supplier policy, governance, security, common standards and consolidated reporting. Local level covers language, labour practices, regulatory interpretation, local systems, operational processes, employee consultation and customer expectations. This avoids two common errors: imposing a central model that ignores local realities, and allowing each entity to develop incompatible approaches. The objective is a federated model.
Formats
Three formats, by scope
AI Readiness Executive Review
€2,900excl. VAT
A rapid, independent view of readiness, risk and priority decisions.
One organisation or business unit, targeted interviews, selected document review, current-use inventory, high-level assessment, limited use-case analysis. Executive brief, maturity overview, urgent-risk list, priority use cases, ninety-day action plan and decision session.
AI Readiness Professional Assessment
€8,900excl. VAT
A complete and actionable AI transformation roadmap.
Several business functions, data, processes, technology, security, governance, skills, employee readiness, responsible AI, European regulatory exposure and a prioritised use-case portfolio. Executive summary, full report, maturity scorecard, AI register, risk register, cross-SWOT, governance model, use-case portfolio, AI literacy plan and 12–24 month roadmap.
Nordic & European Enterprise Assessment
On request
A coordinated AI operating model across entities, sites or countries.
Several business units and countries, comparative assessment, local and group requirements, common governance, transformation programme, investment scenarios and support for pilot launch.
Method
Eight stages, remote-first
The engagement runs in eight stages: executive alignment; current-use inventory; documentary and system review; interviews and workshops; maturity and risk assessment; use-case qualification; roadmap design; and an executive decision session. Interviews, workshops, analysis and closing sessions are conducted by video and through secure document spaces — which shortens timelines, makes stakeholders easier to mobilise, allows work across several countries and limits the environmental footprint of the engagement. Targeted on-site presence is proposed only where understanding physical flows or operational practice requires it.
Included scope: up to fifteen main documents, six 60-minute interviews, one primary functional scope, a 90-minute closing session, and a ten working-day email clarification period. Beyond that, the engagement is extended by written amendment or requalified to a higher service level.
Terms of the engagement
What it is, and is not
What it is
A supplier-independent assessment. Qualified use cases, not ideas. A budgetable, measurable trajectory with named accountability.
What it is not
Not legal advice or a regulatory audit, not vendor selection on your behalf, not a promise of return on investment. The engagement should not be used to justify a technology purchase already decided without analysis: it exists to improve the quality of the decision.
FAQ
Questions you're likely to ask
The Executive Review to frame a first decision or prepare a supplier consultation; the Professional Assessment for a complete diagnosis and roadmap; the Enterprise Assessment to coordinate several entities, sites or countries.
No, but you probably are, more than management realises. The register of current use is one of the first deliverables.
No. We are independent of AI vendors, cloud platforms and integrators. The analysis can cover any family of solutions, including open-source and sovereign architectures.
No. Priority use cases are quantified in three scenarios — cautious, central, favourable — with stated assumptions to be confirmed or disproved by a pilot.
We classify your uses by exposure and identify potential obligations, documentation needs and practices to exclude, during project selection rather than after deployment. This is not a legal audit; coordination with your legal advisers remains necessary.
Often, yes. If the assessment shows data is not trustworthy, the Data & Performance Optimisation Review is the useful prerequisite — you do not automate on data you cannot trust.
It is the international edition of the same service, extended for Nordic and cross-border realities: twelve dimensions instead of ten, a governance and policy framework, a cross-border layer and European compliance by design.
After a first exchange, we agree scope, format and terms. Payment is by invoice before the engagement starts. Prices are shown excl. VAT; for EU B2B clients, reverse-charge VAT applies.
Next step
Request an assessment
From
€2,900excl. VAT
Leave us your work email and briefly describe your situation: we'll come back to frame the scope, choose the format and confirm the terms. No commitment at this stage.
AI use and governance is one of the domains examined on the security side. This assessment covers cyber exposure as a whole — applicability country by country, critical services, dependencies and NIS2 readiness.
