The company, reviewed as a whole
Others review a system. The Assessment reviews the company. Accountability for AI attaches to the legal person and its officers, so the subject here is the entity: how it governs, discloses and reports its use of AI, and whether the board can answer for it. It is a fixed method applied to a single subject, which is what lets the review mean something and repeat year on year.
What it covers
We follow the company's AI across the value chain, upstream and downstream. That includes the supply that feeds it, the way it is deployed, and its effects on rights, the environment and customers. We assess whether and how the company governs that chain, not a narrow set of runtime indicators alone. We read eight governance domains against one another, in four passes across the public record and the evidence the company has released. Where a specialist supply chain, human rights or environmental assessment is wanted, it is delivered by partner firms and held at arm's length, so our review stays independent.
What the board receives
Board Note
The short, board-level read: where the governance holds, where the exposure sits, and what to do about it.
Executive Report
The full findings across the eight domains, in the language of alignment risk, potential exposure and evidence gaps.
Evidence Annex
What we read, and what we could not, so the basis of every finding is on the record.
Board presentation
The findings taken to the board or its delegate in person.
Progress View
From the second year, the current position set against the last, so the board sees movement, not a single snapshot.
Who commissions it
Only the board or its delegate can commission a review of the company. In practice that is the board and audit committee, or, where delegated, the audit committee chair, chief risk officer, general counsel or company secretary. Operational teams are how we get into an organisation and who we work with during the engagement. They are not the audience for the report. The report is written for the people who answer for the entity.
The register
The Assessment is advisory review and guidance. It is not assurance and not a legal opinion. It gives the board a documented, independent view it can rely on internally, with its limits stated, before regulators, investors or claimants form their own. We hold no product in the systems we review, and we implement nothing we assess.
Timing
The Assessment is annual and timed to the reporting cycle. We are taking engagements now for the FY2027 cycle.
If a full Assessment is more than you are ready to commission, the Disclosure Integrity Review is a bounded first step, three to four weeks, and its fee is credited against a later Assessment.