The advice, the systems, and the product leadership to keep them running. Over twenty-five years where “it works in the demo” was never the end of the conversation.
These are the strongest figures I have. Each one carries the limit of my own claim to it, because you were going to ask anyway — and because a number without its attribution is just a number.
This is the whole method, in miniature. My evidence base is a single source of truth, and every claim in it carries an attribution field written before anyone asked. The assistant below reads those fields and leads with them. It is not being modest — it is reading the data.
Ordered by depth of commitment, lightest first. Every engagement has a fixed scope and a fixed duration before it has a price.
Most people arrive at 01 and never need the rest. That is a good outcome.
Twelve minutes. No radio buttons. It adapts to what you say, and it will tell you when your answer changes the diagnosis. You get the score, the read, and the plan — before anything is asked of you.
Every question maps to a named subcategory of the NIST AI Risk Management Framework 1.0 — four functions, nineteen categories, seventy-two subcategories. It is free, it is public, and you can read the exact line I scored you against.
The 1–5 levels are mine. NIST doesn’t define maturity levels — it is explicitly
“outcome-focused and non-prescriptive”, and it says its actions “do not constitute a
checklist”. Anyone selling you a “Level 3 against NIST” invented that ladder too. The
difference is that mine is published: 0 / 1 / 2 per subcategory, mean × 2.5.
On the governance dimension I also name the relevant ISO/IEC 42001 Annex A control areas. I don’t reproduce the standard — it’s paywalled at roughly CHF 225, which is precisely why I won’t pretend you can verify a score against it.
If that answer is unsatisfying, it is the same answer you will get from me on a Tuesday afternoon about your own numbers.
Not a portfolio grid. Ask the assistant anything about any of them — what shipped, what didn’t, which technology decision I reversed and why.
Each one comes with what to do instead, because naming a problem and walking away from it isn’t honesty — it’s just a shrug.