Thames Kay Consultancy LLCGovernance that maps to the regulation.
Our blueprint connects every policy and control to the EU AI Act and ISO/IEC 42001 — so readiness is documented, not assumed.
AI Policy Development
Acceptable-use guidelines, roles and accountability mapped to your operating model.
Responsible AI
Fairness, transparency and bias-testing metrics with documented thresholds.
Data Governance
End-to-end data lineage, provenance and access controls.
EU AI Act conformity
Risk classification, Annex III mapping and a pre-audit readiness review.
ISO/IEC 42001 AIMS
AI management system design with the evidence regulators expect.
Model governance
Lifecycle oversight: approval gates, monitoring and retraining policy.
Compliance we deliver, by regulation.
Targeted controls and evidence for the regimes your AI systems answer to.
UAE & GCC regimes
GCC-native compliance for the regimes regional institutions actually answer to — read in the original, not summarised from afar.
- CBUAE AI/ML supervisory expectations
- DIFC Regulation 10 — autonomous systems
- ADGM & DFSA technology governance
- UAE PDPL alignment for AI processing
EU AI Act compliance
Readiness for the EU AI Act's obligations on high-risk AI systems — relevant to any GCC firm serving EU markets.
- Risk classification & Annex III mapping
- Conformity assessment preparation
- Technical documentation file
- Post-market monitoring design
Standards & frameworks
International standards mapped into one management system rather than parallel paper exercises.
- ISO/IEC 42001 AI management system
- ISO/IEC 38507 board oversight
- NIST AI Risk Management Framework
- ISO 27001 security extension for AI
What we're tracking now.
From baseline to continuous assurance.
Assess
Every engagement opens with a discovery session and readiness scan — what you have, what it does, and where the gaps are.
Govern
Structures, policies and controls aligned to the frameworks your regulators expect — before any execution begins.
Execute
Hands-on delivery with accountable owners, milestones and evidence trails — advisory that ships, not slideware.
Assure
Independent review and board reporting that turns technical detail into decisions your leadership can defend.