Find counsel and consultants who work on AI regulation every day.

Large and mid-size law firms with a dedicated artificial intelligence or algorithmic-governance practice group advising on AI regulation, litigation and deployment risk.

Small firms, solo practitioners and fractional general counsel whose practice centers on AI law, AI governance counseling and emerging-technology regulation.

Consulting firms that design AI governance programs, run EU AI Act readiness work, implement the NIST AI Risk Management Framework and advise on responsible-AI policy.

Independent auditors and assurance labs performing algorithmic bias audits, model validation, AI red teaming and NYC Local Law 144 automated employment decision tool audits.

Accredited certification bodies that audit AI management systems against ISO/IEC 42001, plus consultancies that prepare organizations for that certification.

Privacy consultancies, outsourced data protection officers and GDPR and US state privacy advisors whose work extends to AI privacy and AI impact assessments.

Software platforms for AI inventory, model risk management, EU AI Act workflow, ISO 42001 and NIST AI RMF control automation and compliance monitoring.

Amsterdam, Netherlands / Boutique AI Counsel

Considerati is an Amsterdam-based legal and public-affairs consultancy that helps organizations implement AI governance frameworks, run AI impact assessments and DPIAs, and develop AI policies aligned with EU rules. It also offers an 'AI Officer as a Service' model and training for teams navigating AI and privacy law.

Washington, DC / Boutique AI Counsel

Technology-focused law firm whose AI Division (which absorbed the Luminos.Law team) conducts privileged AI model audits — statistical bias and performance testing — plus generative AI red teaming, to help clients meet NYC LL144, the Colorado AI Act and other regulatory requirements.

Tampa, FL / AI Audit & Assurance

Accredited compliance-audit firm (ISO 42001 accredited since October 2024) offering ISO/IEC 42001 AI management system certification, AI risk assessments and readiness assessments alongside its SOC 2, ISO 27001 and FedRAMP audit practice.

Tampa, FL / AI Audit & Assurance

Audit and assessment firm that certifies AI management systems against ISO/IEC 42001 and says it was the first certification body to gain ANAB accreditation for the standard. It also runs a broader AI governance practice including AI red teaming.

Staines-upon-Thames, United Kingdom / AI Governance Consultancies

Intelance is a UK AI governance and assurance advisory offering fixed-fee engagements such as an AI Governance QuickScan, EU AI Act readiness assessments and ISO/IEC 42001 implementation support. It also runs an ongoing 'AI Risk-as-a-Service' subscription and supplier AI risk assessments for enterprise clients.

London, United Kingdom / AI Governance Consultancies

A Jolly Consulting is a London-based boutique that audits AI and cybersecurity frameworks against standards including ISO/IEC 42001, the EU AI Act and NIST, and runs threat and vulnerability assessments on AI infrastructure. The firm also evaluates incident-response readiness and delivers board-level AI risk reporting.

Duluth, GA / Privacy & Data Protection

Georgia-based risk, privacy and compliance consultancy (two decades in business) offering GDPR/CCPA compliance and a Virtual Privacy Officer service, alongside AI Risk Management advisory and ISO/IEC 42001 certification support.

London, United Kingdom / AI Governance Consultancies

Holistic AI, founded out of University College London, provides an AI governance platform and audit services covering AI inventory, risk management, red-teaming and regulatory alignment with frameworks such as the EU AI Act, NIST AI RMF, ISO 42001 and NYC's bias-audit law. The company maintains offices in London and San Francisco serving enterprise clients globally.

London, United Kingdom / Privacy & Data Protection

UK-headquartered privacy and compliance consultancy with offices in Jamaica and India, offering privacy audit and assurance, DPO-as-a-service and data discovery alongside a dedicated AI Governance Services line.

Amsterdam, Netherlands / Boutique AI Counsel

Considerati is an Amsterdam-based legal and public-affairs consultancy that helps organizations implement AI governance frameworks, run AI impact assessments and DPIAs, and develop AI policies aligned with EU rules. It also offers an 'AI Officer as a Service' model and training for teams navigating AI and privacy law.

Staines-upon-Thames, United Kingdom / AI Governance Consultancies

Intelance is a UK AI governance and assurance advisory offering fixed-fee engagements such as an AI Governance QuickScan, EU AI Act readiness assessments and ISO/IEC 42001 implementation support. It also runs an ongoing 'AI Risk-as-a-Service' subscription and supplier AI risk assessments for enterprise clients.

London, United Kingdom / AI Governance Consultancies

A Jolly Consulting is a London-based boutique that audits AI and cybersecurity frameworks against standards including ISO/IEC 42001, the EU AI Act and NIST, and runs threat and vulnerability assessments on AI infrastructure. The firm also evaluates incident-response readiness and delivers board-level AI risk reporting.

London, United Kingdom / AI Governance Consultancies

Holistic AI, founded out of University College London, provides an AI governance platform and audit services covering AI inventory, risk management, red-teaming and regulatory alignment with frameworks such as the EU AI Act, NIST AI RMF, ISO 42001 and NYC's bias-audit law. The company maintains offices in London and San Francisco serving enterprise clients globally.

London, United Kingdom / Privacy & Data Protection

UK-headquartered privacy and compliance consultancy with offices in Jamaica and India, offering privacy audit and assurance, DPO-as-a-service and data discovery alongside a dedicated AI Governance Services line.

Bonn, Germany / Privacy & Data Protection

German data protection consultancy (managing director Marcus Belke) offering external DPO services and its own Ailance compliance software platform, which includes a dedicated 'KI-Governance' module for EU AI Act compliance — a software-plus-advisory business rather than a pure software vendor.