Skip to main content

US + EU · 8–12 weeks

Multi-Jurisdictional AI Compliance Review

A unified compliance posture across Illinois, California, New York, and the EU AI Act. For Illinois-headquartered organizations with regional or global operations.

Why now

The EU AI Act high-risk system obligations apply August 2, 2026. Most Illinois multinationals with EU operations or EU customers are not yet ready. Layered on that:

  • Illinois HB 3773 went live January 1, 2026 (employment AI, strict liability)
  • Illinois WOPR Act has been in effect since August 1, 2025 (mental health AI)
  • California's ADMT regulations under CCPA/CPRA, SB 53 (TFAIA), SB 942 (AI Transparency Act), and AB 2013 (training data transparency) apply to companies with California operations or California consumers
  • NYC Local Law 144 has been enforced since 2023 (automated employment decision tools)
  • Colorado's AI Act took effect February 2026

A patchwork response to each statute produces patchwork governance and patchwork documentation. A unified review produces a single compliance architecture that satisfies overlapping requirements coherently.

Who this is for

  • Illinois-headquartered public companies with multi-state US operations and EU exposure (operations, customers, supply chain, or data flows)
  • Large IL-HQ private companies with Fortune 1000-equivalent regulatory exposure
  • IL-HQ healthcare and life sciences operators with multi-state and international footprints
  • IL-HQ financial services firms with US + EU operations subject to NYDFS, CFPB, and ECB AI guidance
  • IL-HQ technology and data platform companies with EU users

What you receive

A comprehensive Compliance Architecture Report (typically 60–90 pages) containing:

Enterprise AI Inventory
Mapped by jurisdiction of operation, business unit, and decision type.
Jurisdictional Exposure Matrix
Which obligations apply to which AI systems across IL, CA, NY, CO, and the EU AI Act, with a unified control framework.
EU AI Act Readiness Assessment
Classification analysis (prohibited, high-risk, limited-risk, minimal-risk), high-risk system documentation requirements, conformity assessment pathway analysis, and gap identification against the August 2, 2026 deadline.
Strict-Liability Risk Assessment
For HB 3773 and parallel state employment AI laws.
ADMT/CCPA Compliance Mapping
For California operations.
NYC LL144 Compliance Verification
For NYC employment touchpoints.
Unified Control Catalog
A single set of controls that satisfies overlapping obligations across jurisdictions, reducing duplicative governance.
Vendor Due Diligence Framework
Scaled to enterprise AI deployment.
Board, Audit Committee, and Risk Committee Reporting Architecture
How AI compliance posture is reported, on what cadence, by whom.
Compliance Posture Memo
For board and senior leadership distribution.

Also included

  • A board or committee walkthrough session
  • A separate executive summary suitable for D&O carrier underwriting conversations
  • The complete workpaper file
  • 120 days of follow-up access

Timeline

  1. Weeks 1–2

    Kickoff, scoping memo, jurisdictional footprint mapping, master information request.

  2. Weeks 3–5

    AI inventory build across business units, stakeholder interviews (legal, compliance, privacy, IT, business unit leadership).

  3. Weeks 6–8

    Jurisdictional mapping, EU AI Act classification, gap analysis, control catalog development.

  4. Weeks 9–10

    Report drafting, internal review, vendor due diligence framework.

  5. Weeks 11–12

    Stakeholder walkthrough, board-ready summary, executive briefing materials.

Investment

Fixed fee, typically $110,000–$200,000.

Engagement type
Fixed fee

Scoped before signature; scoping conversations are without obligation.

Fee range
$110,000 – $200,000

Depending on number of business units in scope; number of jurisdictions in scope (the lower end assumes IL + CA + EU; the upper end includes additional state and international jurisdictions); number of AI systems and vendors; and whether the engagement includes board briefing delivery.

For Fortune 500-scale engagements with full enterprise scope, fees may exceed this range.

Ready to begin?

Most engagements begin with a 30-minute conversation. No obligation, no sales script.