Skip to content
Schedule a meeting

AI Sovereignty Scan

Ten working days to decide where AI should run, which rules apply and what to build first.

Why now

Most boards cannot say where their AI runs. Supervisors, clients and the AI Act now ask.

The scan is Lindstead's AI readiness assessment. In ten working days the board knows which AI is in use, which law can reach the data, which duties apply and what to build first.

  • 10 days from kick-off to board memo
  • €6,500 fixed fee, excluding VAT
  • 6 hours of your team's time

Covers one legal entity, up to 10 current or planned AI systems and 4 stakeholder interviews. Fee and scope are confirmed in writing before kick-off.

Book a 30-minute intake 2-minute self-check

How ready is your organisation for AI?

Seven questions, two minutes. Your score appears straight away. No email address needed.

  1. Strategy and use cases Does your first AI use case have an owner, a budget and a way to measure success?
  2. Data Do you know which data that use case needs, and that you may use it?
  3. Infrastructure Can you name the provider and the country behind every AI tool your staff use?
  4. Jurisdiction Do you know which of those providers fall under US law, even when the servers are in Europe?
  5. Regulation Does each AI system have an AI Act risk class and a date by which its duties apply?
  6. Security and vendors Do your contracts say whether providers keep your prompts and files, or train on them?
  7. People and skills Have staff who use AI been trained, as the AI Act has required since February 2025?

Answer all seven questions to see your score.

What the board gets

View the example board memo, AI register and scoring method.

  • Readiness score Seven dimensions, each with a score, supporting evidence and gaps to close.
  • AI register The AI systems in scope, with owner, data, provider and hosting region.
  • Jurisdiction map Which providers fall under US law, which data they can reach, and what that means for the board.
  • Regulatory map The AI Act, GDPR, DORA and NIS2 duties that apply, with dates and unresolved questions.
  • Hosting advice Which workloads suit an external provider, a European cloud or infrastructure the organisation controls.
  • Board memo Five pages with a recommendation, first use case, cost range and 90-day action plan.

The assessment uses interviews and documents. Deployment, penetration testing and a legal opinion are outside this scope.

How it works

  1. Day 1: Kick-off. Lindstead confirms the scope and interviews IT, risk, privacy and one business owner.
  2. Days 2 to 5: Assessment. Lindstead records the systems in scope, scores seven dimensions and traces data access.
  3. Days 6 to 8: Options. Applicable duties are mapped. Use cases, hosting options and costs are compared.
  4. Days 9 to 10: Board memo. Lindstead presents the recommendation and 90-day plan to the board or executive team.

Who it is for

Organisations that use AI on sensitive data and answer to a supervisor, a regulator or demanding clients.

  • Banks, insurers and asset managers under DORA
  • Hospitals, health insurers and life sciences
  • Ministries, municipalities and agencies
  • Law firms, accountants and consultancies
  • Energy, water, telecoms and transport operators
  • Manufacturers protecting designs and production data

Frequently asked questions

  • €6,500 excluding VAT for one legal entity and up to 10 AI systems. Extra entities or systems are quoted in advance. An intake call creates no order.

  • About 6 hours of client input, including the kick-off, interviews and final discussion.

  • No. The scan works from interviews, contracts, architecture documents and existing registers. No production access is needed.

  • The organisation owns the memo and can act on it alone. Lindstead can also take the first use case to production on infrastructure the organisation controls.

Discuss the AI Sovereignty Scan.

A 30-minute intake shows whether the scan fits. Teams with a defined deployment project can discuss it directly.

Book a 30-minute intake Send a message