AI is already inside.
Chatbots, writing assistants and AI features switched on inside the software you already license. Employees paste confidential data into tools nobody reviewed. Most companies cannot say where AI runs today.
AI compliance and implementation
AI, adopted responsibly.
Your teams are already using AI, whether or not anyone approved it. We help you see where it runs, govern it against the rules that apply, and roll out new AI tools and agents with guardrails your people will actually follow.
- NIST AI RMF
- ISO/IEC 42001
- EU AI Act
- U.S. state AI laws
We work with organizations in the US, UK, EU and Canada. Our brand protection service also covers the UK and EU and Canada.
The problem
AI moved faster than your compliance program.
The rules keep moving.
The EU AI Act phases in over several years, and in 2026 the EU pushed its main high-risk deadlines to December 2027 and August 2028. Deferred, not cancelled. U.S. states keep adding their own AI laws, each with its own definitions and duties.
Regulators expect governance.
Existing consumer protection, anti-discrimination and privacy rules still apply when a decision is made by software. Regulators increasingly ask who approved an AI use, how it is tested and who is accountable.
Programs were built for people.
Legacy compliance frameworks cover people and processes, not models, training data, vendor AI features or agents that act on their own. That gap is where the risk sits.
Services
Four ways to get ahead of AI risk.
01 · Assess
AI Compliance Readiness Audit
An inventory of the AI in use across your organization, including AI embedded in vendor software and shadow AI your teams adopted on their own. Each use is mapped to the EU AI Act, U.S. state AI laws and regulator guidance, then turned into a prioritized remediation roadmap.
02 · Build
AI Governance Program Build
Policies your people will follow: AI use policies, a risk classification method, human oversight controls, AI incident response and vendor AI due diligence, assembled into a program that stands up to audit.
03 · Implement
AI Implementation Consulting
Help picking, piloting and rolling out AI tools and agents safely. We design the workflows, set the guardrails and train your team, so adoption moves quickly without creating new exposure.
04 · Operate
Fractional AI Compliance Lead
A retained lead for AI compliance without a full-time hire: intake reviews for new AI uses, vendor reviews, policy upkeep as the rules change, staff training and clear reporting to leadership and your board.
Frameworks
Built on the frameworks regulators recognize.
NIST AI RMF, ISO/IEC 42001, the EU AI Act and U.S. state AI laws. We use recognized standards as the backbone of your program, so the work maps to what auditors, customers and regulators already ask about.
How an engagement works
From first call to a program that runs.
- 1
Consultation
A short call to understand how you use AI today, where you plan to take it, and which rules are likely to apply. You get a clear recommendation on where to start.
- 2
Scope
A fixed scope and a fixed starting price in writing, with named deliverables and a timeline. No open-ended hourly meter.
- 3
Assess
We inventory every AI touchpoint, interview the owners, review key vendor terms and map each use to the frameworks and laws in scope.
- 4
Build
We close the gaps with policies, controls, oversight roles and vendor requirements, proportionate to your actual risk rather than a template.
- 5
Roll out
New AI tools and agents go live with defined workflows, guardrails and training, starting with a pilot before a wider rollout.
- 6
Operate
Optional ongoing support keeps the program current with monitoring, intake reviews and updates as the rules change.
Pricing
Clear starting points.
Every price below is a starting point. Your written scope sets the final fee.
Start here
Readiness Audit
Starting at
$7,500
Fixed fee, set by scope
- AI inventory, including vendor-embedded and shadow AI
- Mapping to the EU AI Act, U.S. state AI laws and regulator guidance
- Gap assessment and prioritized roadmap
- Executive readout
Most complete
Governance Program Build
Starting at
$15,000
Project
- AI use policies and risk classification
- Human oversight and incident response
- Vendor AI due diligence
- Alignment to NIST AI RMF or ISO/IEC 42001
Adopt AI safely
Implementation Sprint
Starting at
$5,000
Per sprint
- Tool and agent selection
- Pilot workflow design with guardrails
- Rollout plan and team training
Ongoing
Fractional Retainer
Starting at
$3,000/mo
Fractional AI Compliance Lead
- Intake reviews for new AI uses
- Vendor reviews and policy upkeep
- Training and leadership reporting
All prices are starting points in USD. Final fees depend on organization size, the number of AI systems in scope and the frameworks involved, and are confirmed in a written scope before work begins. Legal questions are handled by licensed counsel under their own engagement letter.
For mid-size companies
AI Security Governance
Advanced AI is finding software flaws faster than companies can fix them. And the best defensive tools go to organizations that can show they are trustworthy. We help mid-size companies close both gaps: fixing what is known, faster, and building the governance record that earns access to better defenses.
Governance and compliance only. We do not perform penetration testing, vulnerability scanning or hacking of any kind. Technical security work goes to independent partner security firms.
Earn access
Trusted Access Readiness
We build the governance record vendors and partners require before granting advanced security tooling: security and AI use policies, vendor due diligence files, an incident response plan and a named accountable owner.
From $7,500
Oversee
Fractional AI Risk Officer
Ongoing oversight, policy upkeep and board-ready reporting for companies too small for a full-time CISO plus an AI governance lead.
From $3,000/month
Fix faster
Patch Velocity Governance Audit
We measure the time from known issue to fix, who owns each step and where it stalls, then deliver a leadership scorecard and a 90-day plan.
From $6,000
Regulated industries
Healthcare and Regulated Industry Programs
HIPAA security risk analysis support and alignment with the FDA's medical device cybersecurity expectations, coordinated with counsel where legal interpretation is needed.
Quoted per scope
Hold vendors to it
Vendor Risk Monitoring
We track your software vendors' disclosed issues and patch commitments, and strengthen the contract terms that hold them to it.
From $1,500/month
Insurability
Cyber Insurance Readiness
We prepare accurate answers to insurer security questionnaires and help you improve the controls they score.
From $2,500
Governance and compliance services only. Technical testing is performed by independent partner security firms under their own engagements. Hauserman Listing Guard is not a law firm and does not provide legal advice.
FAQ
Common questions.
Is this legal advice?
No. This is a compliance and implementation consulting service. We assess how you use AI, build governance programs against recognized frameworks and help you roll out AI tools safely. We do not give legal opinions or represent you. Legal questions are handled by licensed counsel under their own engagement letter.
Who is this for?
Companies adopting AI that do not have a dedicated AI governance owner, including teams in regulated industries and businesses whose customers or boards have started asking how AI is governed.
We are a U.S. company. Does the EU AI Act matter to us?
It can. The EU AI Act can reach companies outside the EU when their AI systems are placed on the EU market or their outputs are used in the EU. The Readiness Audit identifies whether and how it applies to your uses.
What is shadow AI?
AI tools and features in use without formal approval: a team signing up for a chatbot, an employee using a personal AI account for work, or an AI feature switched on inside software you already license. You cannot govern what you have not found, so the inventory comes first.
Can you help us actually roll out AI, not just govern it?
Yes. Implementation consulting covers choosing tools and agents, designing pilot workflows, setting guardrails and training your team, so adoption and governance are built together.
Do you do penetration testing or vulnerability scanning?
No. AI Security Governance is a governance and compliance service. We do not perform penetration testing, vulnerability scanning or any other hacking. When you need technical testing, it is performed by independent partner security firms under their own engagements, and we coordinate the governance side around it.
Do you certify us under ISO/IEC 42001?
No. Certification is issued by accredited certification bodies. We help you build and document a management system aligned to the standard so you are ready for that assessment if you choose to pursue it.
Consultation
Start with a conversation.
Tell us how your organization uses AI today and what you are planning. Joshua Hauserman, who holds a J.D. and brings more than 15 years of legal and compliance experience, will reply to set up a call.
- 1Send a few lines about your AI use and goals.
- 2We schedule a short consultation call.
- 3You get a recommended starting point and a written scope.