Documentation for the people who have to rely on it.
Findings, policies and briefing materials written so operators, counsel, insurers and directors read the same facts.
A written record, not a portal you have to learn.
Reporting is how the work leaves the firm. Findings are prioritized, with evidence. Method, coverage and limitations are stated in the same document. Technical and executive readers get the same facts — the difference is which section they start with.
Clients also engage us to write or review policies, system documentation and briefing materials when a counterparty, an insurer or a board has asked for something they can file. We write what you actually do, not what a template claims you do.
The report is confidential to the named client. You may share it. We do not publish client names or findings. The same terms apply for work delivered internationally.
Findings reports
Confirmed issues, suspected items labelled as such, reproduction notes sufficient for your team, severity and recommended next steps.
Policies and system notes
Acceptable-use, access, backup, AI and vendor documents that match the environment you run — written so an operator can follow them.
Board and insurer briefs
A short briefing that states coverage, residual risk and what was out of scope. Not a marketing summary of the engagement.
Evidence, priority, limits.
A named analyst is accountable for the findings. If we did not test something, the report says that. If a control is good enough, we say so. Recommendations are not tied to a product we sell.
Reporting can stand alone — for example, turning an existing assessment into a brief counsel can use — or sit at the end of an audit or test.
In every report
- Named targets and a named analyst
- Method and coverage stated plainly
- Unconfirmed findings labelled as such
- Client material never used to train or tune a model
Request a written proposal.
Describe the system, vendor or AI deployment under consideration. We respond with the proposed scope, timeline and fee.