Skip to content
DEENRequest an intro call

AI Governance, GRADmap

Rules that speed up approvals.

We assess your organisation across eight fields of action, with evidence instead of assumptions, and derive measures that speed approvals up instead of slowing them down.

Eight fields of action

The framework of our assessment.

  1. 1

    Strategy & Governance

    Ownership, policy, vision.

  2. 2

    Regulation

    Applicability, prohibited practices, disclosure.

  3. 3

    Data & Privacy

    Records, data rules, locations and transfers.

  4. 4

    Technology & Tools

    Tool inventory including AI in existing software.

  5. 5

    Security & Operational Risk

    Exfiltration controls, access, reporting path, vendor contracts.

  6. 6

    Processes & Portfolio

    Register, shadow AI, approval path.

  7. 7

    People & Skills

    Training, staff communication.

  8. 8

    Implementation & Evidence

    Oversight, ability to produce evidence within days.

How we assess

Maturity with evidence, not gut feeling.

Maturity scale 0 to 4

  • 0Not present
  • 1ad hoc
  • 2defined
  • 3practised
  • 4managed

Obligation per criterion

  • Mandatory
  • expected
  • recommended

Evidence discipline

No rating without evidence:

  • document
  • system extract
  • interview
  • observation
BoundariesWe do not audit, do not certify and do not perform conformity assessments; our assessment workbook GRADmap prepares the ground for them.

Two legal spaces

One approach for Switzerland and the EU.

EU

  • EU AI Act: obligations staggered by risk.
  • Transparency towards customers and employees.
  • Training of the workforce.

Switzerland

  • Sector-based approach: no general AI law, amendments to existing law.
  • Federal Act on Data Protection (FADP): applies directly to AI that processes personal data.
  • Industry rules: supervisory requirements, for example from FINMA in finance.

GRADmap maps your systems to both legal spaces.

Three paths

From findings to implementation.

  1. Initial review

    Interviews with key roles and a review of your existing documents, on site or online. You receive a short report showing how urgent each field is.

  2. Position assessment

    Using interviews, documents and a system view, we assess all eight fields and deliver the maturity level with evidence, a catalogue of measures and their sequence, in larger organisations for each entity, division or programme. The assessment workbook then belongs to you.

  3. Implementation

    We implement the measures with your owners and dates and set up approval paths and the AI register. This produces the evidence a later audit asks for.

Scope noteWe do not anticipate an audit outcome, but you will know of identified gaps before an internal or external audit, each with a measure, an owner and a date. Article references are for orientation; binding legal questions are for your legal counsel.

The next step

Where do you stand today?

In the intro call we settle applicability, urgency and the first step.

Request an intro callStart the GRADcheck