By capability
All solutions AI Strategy, Readiness & Governance Custom AI & Automation Executive & Team Upskilling AI Safety & Assurance ProgrammeBy organisation size
Small business & individuals Mid-market Enterprise & regulatedStart free
AI Readiness Assessment ISO/IEC 42001 Quick CheckRigorous AI safety, ISO/IEC 42001 alignment and fractional executive oversight for large organisations and highly regulated entities (150+ employees · turnover £54m+).
Two free assessments take under fifteen minutes between them. Above those sits a five-rung engagement ladder with published starting prices, so you know the shape of it before you speak to anyone. Every rung is led personally by Dr. Mahdi Seify.
Running a medium-sized or smaller business? Medium Business Solutions → · Small Business & Individuals →
“Are we ready to use AI — and is anyone governing it?”
42 questions, under 12 minutes. Eight dimensions, scored into a Readiness score and a Governance score, with one recommended next step. Emailed the moment you finish.
“Could we stand up an ISO/IEC 42001 audit?”
15 questions, about 8 minutes. Mapped to the standard itself — Clauses 4 to 10 and all thirty-eight Annex A controls — with the eight Stage 1 gates reported on screen immediately.
Five rungs. Every price leads with “from” and becomes a fixed, written figure after a confidential Governance Readiness Call — before any work begins. Most organisations enter at tier one or tier two, not tier four.
Flexible, senior-level advisory led by Dr. Mahdi Seify — PhD, ISO/IEC 27001 Lead Auditor and Lead Implementer. Built for the question that cannot wait for a programme: an urgent AI vendor contract review, a board paper due Friday, or an ISO/IEC 42001 technical deep-dive with your compliance team.
A rapid two-to-three day baseline audit of your data flows and AI estate, ending in a formal written determination of your exposure to the EU AI Act and to ISO/IEC 42001 requirements — system by system, with each one risk-tiered.
The cheapest way to find out whether tier four is your problem or somebody else's. Frequently the answer is that your exposure is narrower than feared, and we say so.
Intensive enablement equipping directors to confidently discharge their legal, regulatory and corporate oversight duties regarding AI systems. What the EU AI Act and ISO/IEC 42001 actually oblige them to do, where liability sits when an AI-supported decision goes wrong, and the six questions to put to their own executives.
Oversight is a duty that cannot be delegated to a consultant. This session exists so that it does not have to be.
Comprehensive ISO/IEC 42001 gap work — Clauses 4 to 10, with all thirty-eight Annex A controls considered and every applicable one assessed — together with AI system impact assessments against ISO/IEC 42005 and EU AI Act risk-tiering. One accountable structure, one owner, one set of findings that do not have to be reconciled by you.
Deploying and tailoring VisionXY7's proprietary, pre-engineered enterprise governance templates directly to your data architecture — you pay for judgement applied to your estate, not for documents written from a blank page.
Includes Q1 Fractional Chief AI Officer oversight, strictly capped at up to six structured advisory sessions and bi-weekly steering committee attendance. Beyond that cap, tier five applies.
Pricing represents a volume retainer advantage, scaled for single-entity mid-market organisations. Multi-jurisdictional footprints require custom scoping, and we will tell you that on the first call rather than the last.
Typically three to six months. Scoped and fixed in writing before anything starts.
See the programme → Task-by-task delivery schedule →Ongoing continuous improvement, vendor risk evaluations and Plan-Do-Check-Act monitoring, so that audit readiness is a state you stay in rather than one you reached once. Policy exceptions decided, the approval gate defended, the system inventory reconciled, and a quarterly board report written for non-executives.
One to four days a month, minimum six months. Ends either by renewal or by handover to the person you have appointed internally — both are planned for from the start.
Every figure above leads with “from” because scope genuinely varies — an eight-system estate in one country is not a two-hundred-system estate across three regulators. The figure is where the work starts; it is confirmed as a fixed number in writing before anything begins. Not yet at enterprise scale? A lighter Fractional Advisory Retainer is available from £1,800 per month, and both assessments above stay free whatever you decide.
Dr. Mahdi Seify is an ISO/IEC 27001 Lead Auditor and Lead Implementer. The AI work is built on that audit methodology — the same evidence standard, applied to AI-specific standards. A gap report from here is written the way an auditor writes one: the requirement first, the evidence second, the gap third.
A PhD in AI-Driven Business Analytics from the University of Liverpool, and a Senior Lecturer and Programme Leader for an MSc in Business Analytics. The models under discussion are ones he has built, taught and published on — not ones he has read about.
Eighteen years leading governance and analytics programmes, including a $200M World Bank multi-ministry programme and technical transformation leadership for a 118-million-subscriber telecom operator. Governance that has held up under scrutiny at that size.
On the AI standards, precisely: Dr. Seify holds working knowledge of, and applies, ISO/IEC 42001, ISO/IEC 23894, ISO/IEC 42005, the NIST AI Risk Management Framework and EU AI Act risk-tiering — built on his ISO/IEC 27001 Lead Auditor methodology. He is not an ISO/IEC 42001 Lead Auditor and is not ISO/IEC 42001 certified; no such accreditation is claimed. Certification against ISO/IEC 42001 is issued only by a certification body accredited under ISO/IEC 42006. VisionXY7 Ltd prepares organisations for those audits and reviews their systems independently; it does not perform certification audits, and no consultancy can.
Fifteen minutes, no account, no card, no call required to get the result. It tells you which rung is actually your next step — sometimes the honest answer is “none yet”.
Forty-five minutes with Dr. Seify, not a salesperson. You bring your result or your situation; you leave with a scope and a written figure, whether or not you go ahead.
What is included, what is not, what it costs, and what you hold at the end of it. The “from” price becomes a fixed one before any work begins.
One of the two free assessments, almost always. If someone has named ISO/IEC 42001 to you — a tender, a customer questionnaire, an insurer, a board decision to certify — take the ISO/IEC 42001 Quick Check. If the concern is broader, take the AI Readiness assessment. Both take under fifteen minutes and both end with one recommended next step, which is frequently not the most expensive thing on this page. If the assessment says your exposure is the open question, tier two — the EU AI Act Applicability Assessment — answers it formally for a fraction of the flagship.
Because scope genuinely varies and a single figure would be false precision. An eight-system estate in one country is not a two-hundred-system estate across three regulators, and pretending otherwise would mean either overcharging the first or under-delivering for the second. The “from” figure is where the work starts. It becomes a fixed, written number after the readiness call, before anything begins.
No, and neither can any consultancy. ISO/IEC 42001 certification is issued only by a certification body accredited under ISO/IEC 42006. What VisionXY7 does is prepare you for that audit and review your systems independently beforehand — the gap assessment, the documents, the evidence trail. A firm that both built your management system and certified it would not be independent, which is precisely why the rule exists.
Not quite, and the difference matters when a board asks. Governance is the structure — who decides, who approves, what is written down. Safety is the outcome that structure is supposed to produce: that the AI in your organisation does not harm the people it touches, and that you would know if it did. You can have governance without safety. The programme on this page treats safety as the goal and governance as the means. The long version is here →
It can. The Act applies on the basis of where the output is used, not only where the provider sits — so a UK organisation whose AI output reaches people in the EU can fall in scope. General-purpose AI obligations have applied since 2 August 2025, with enforcement from 2 August 2026; high-risk obligations were deferred to 2 December 2027 under the Digital Omnibus package. In the UK there is no AI statute and the approach is regulator-led — ICO, MHRA, FCA, CQC, GDC. No statute does not mean no obligations.
Dr. Mahdi Seify, personally, on every enterprise engagement. That is a deliberate constraint on how many run at once, and it is the reason the readiness call is with him rather than with a salesperson. Specialists are brought in where a client needs depth VisionXY7 does not hold — named to you in the scope, never subcontracted quietly.
Take a free assessment and see where you actually stand. If it says the answer is “nothing yet, revisit in six months”, that is what it will say.
Would rather talk first? Book a confidential Governance Readiness Call →
