Find what breaks
before regulators do.
An evidence-based review examining whether selected AI decisions, controls, ownership and supporting evidence can be demonstrated in practice — examined against what the organisation can actually show. Not self-reported. Not theoretical.
AUDIT
Test what can be evidenced in practice
Assessment establishes the baseline. Audit tests the evidence.
CLEAR Assessment
A self-reported diagnostic that helps organisations identify potential governance gaps across the CLEAR methodology. A useful starting point and baseline, rather than verification.
AI Defensibility Audit
An evidence-based review that examines whether governance arrangements, controls and accountability can be demonstrated in practice — through interviews, technology and evidence review, data-flow analysis and governance review.
AI Governance Implementation
Where an organisation chooses to go further: a Yunique AI implementation engagement designing and embedding governance structures, accountability, controls and operating processes — built on what the audit found rather than on a generic template.
How It Works
Typically delivered over four weeks.
Typically delivered over four weeks, depending on scope and organisational complexity. The structure below represents the typical engagement and may be adapted to the scope agreed.
Discovery
- Stakeholder interviews with department heads and senior leadership
- Employee and user discovery where appropriate to the organisation
- AI use-case identification and mapping across business functions
- Shadow AI identification — tools and workflows operating without approval or oversight
- Governance and risk-surface mapping to scope the review that follows
Technology & Evidence Review
- Review of approved AI tools and relevant unapproved AI use
- SaaS subscriptions and embedded AI capabilities inside non-AI tools
- Relevant access and technical evidence
- Data flows across the systems in scope
- Where AI interacts with regulated, personal, confidential or sensitive information
Legal, Risk & Governance Review
- Relevant privacy, security and governance considerations across identified AI use
- Risk assessment across the areas in scope
- Systemic pattern analysis, rather than isolated incidents
- ISO/IEC 42005-aligned AI risk assessment where applicable
- Relevant EU AI Act and data-protection considerations where applicable
- Accountability, human oversight and the governance evidence available
Reporting & Executive Readout
- Written AI Defensibility Report covering the findings
- Executive findings and prioritised recommendations
- Board and executive-ready presentation built from the review
- Closing discussion to walk through findings and agree the appropriate next step
Activities are indicative. The exact scope of any engagement is agreed in advance and reflects the organisation, its AI environment and the level of review required.
Deliverables
AI Defensibility Report
A written review of the AI use, controls, accountability and evidence examined — structured for legal review, regulator requests or internal governance, and informed by Yunique AI's proprietary CLEAR methodology.
Executive Findings & Recommendations
Board and executive-ready findings with prioritised recommendations drawn from the evidence reviewed.
Closing Discussion
A live discussion to walk through the findings and determine the right next step for the organisation.
An Audit May Be Relevant If…
- ✓AI is in use but there is limited visibility into how
- ✓A regulator, auditor or legal team has asked you to evidence your AI governance
- ✓You are preparing for EU AI Act or data-protection obligations
- ✓You are a CISO, DPO, CPO, CRO or General Counsel who needs answers grounded in evidence
- ✓You need to understand the risk before it surfaces elsewhere
“The difference between a governance programme and a defensible one is evidence. This audit examines the evidence.”
Engagement
AI Defensibility Audit
Investment
From £10,000 + VAT
Typically delivered over four weeks. Final scope, timing and fees depend on the organisation, its AI environment, the number and nature of AI use cases, and the level of review required.
The audit · Common questions
What organisations ask before commissioning an audit.
Start a conversation
Could your AI governance stand up to scrutiny?
If you need to understand whether your governance can be demonstrated in practice, tell us what you're trying to assess. We'll help determine whether an AI Defensibility Audit is the appropriate next step.
Not sure whether an audit is the right next step? Tell us what you're trying to assess and we'll help determine the appropriate scope.