How it works
From first conversation to approved report
Every Z2O engagement follows the same six steps. Each step ends with a clear output, and a Z2O consultant approves everything before it reaches you.
The journey
Six steps, each with a clear output
No surprises and no open-ended engagements — you always know where you are and what comes next.
Initial conversation
We start by understanding your business, how AI is used across it, and the reason for the review. Nothing is scored at this stage and there is nothing to prepare. The output is a shared, plain-language picture of where you are and what the review needs to achieve.
Qualification and scoping
Together we confirm fit: the right engagement type, the AI systems in scope, and the evidence you already have available. The output is an agreed scope that both sides understand before anything is priced.
Proposal and Statement of Work
You receive a proposal setting out a clear scope, pricing and timeline — no open-ended commitments. The output is a signed Statement of Work that defines exactly what the engagement covers.
Assessment and evidence review
We carry out the structured assessment: document review, evidence validation and, where it is in scope, independent testing of your AI models for accuracy and bias. The output is a complete set of draft findings and scores, ready for review.
Z2O review
A Z2O consultant reviews every finding, score and recommendation before anything reaches you. Nothing is sent unreviewed. The output is a set of conclusions that carry Z2O's sign-off.
Approved report and improvement plan
You receive only Z2O-approved outputs: the governance report and a prioritised improvement plan. From there, you track remediation with Z2O's support, so the report turns into progress rather than sitting on a shelf.
Preparation
What you need to prepare
Very little. An engagement starts from wherever you are, not from a finished governance file.
A conversation about how you use AI
Where AI shows up in your business today, and what is prompting the review. Plain language is enough.
Whatever policies and evidence you already have
Existing policies, documentation and records — in whatever state they are in.
Access to the right people
Time with the people who own your AI systems, data and compliance, when questions come up.
Missing documents are normal — and they never count against you. Most organisations begin without a complete governance file; that is exactly why reviews happen. Gaps in your documentation are simply where the work starts, and the engagement exists to find them and close them with you.
Step one is a conversation.
Tell us how your organisation uses AI and what is prompting the review. Getting started is a short qualification form — not an account signup.