bickford · AI Workflow Evidence Pack

Start your evidence pack

About fifteen minutes of answers about one AI workflow, one decision-log export, and the pack lands on your delivery page within minutes: a readiness score, a pass / partial / gap matrix against ISO/IEC 42001, the NIST AI RMF and the EU AI Act, risk-ranked findings, a 30-day remediation plan, and a SHA-256 hash-chained ledger you can re-verify. See the sample report (PDF) · FAQ · Privacy and retention

Choose what to run

Full Evidence Pack · $750
Your answers plus one or two decision-log exports, and a prompt registry if the system uses prompts. Up to 30 checks: 11 measured from your logs, 1 from your prompt registry, 17 from your answers, 1 from your retention policy (the 6 prompt checks apply only to a prompt-driven system). Report, findings, 30-day plan and the hash-chained ledger. Readiness Check · $49
Your answers only, no upload. The answer-based checks scored; the log checks reported as not measured, with what the full pack would add. Five minutes, same report format.

one workflow generated by software, unreviewed refund on request

This is a self-assessment generated from your answers and your logs. No person reviews it. It is not an audit opinion, a certification or legal advice. "Not evidenced" means your answers or logs did not show it, not that it is absent.

1. Your organization

Organization name

Email for delivery

The delivery link goes here. Nothing else is sent to it.

Sector

Size (optional)

Jurisdictions

United States European Union

2. The AI system

System or model name

Your role

What it decides, in one line How it works and how its output is used (two or three sentences)

Decisions per month (estimate)

Who receives the decisions

3. EU AI Act scope

Decides whether EU rows are reported as obligations or as a reference benchmark. Say "unknown" when it is.

In scope of the EU AI Act?

High-risk under Annex III?

Basis (why, or what is still open)

4. The workflow

The steps a decision goes through, in order. The report maps each step to the fields in your logs that prove it happened.

5. Decision logs

One or two exports, CSV or JSONL, up to 25 MB total. Export decision records only: IDs, timestamps, model version, output, score, reviewer, override, reason codes, and for a prompt-driven system the prompt ID, prompt version and prompt hash. Replace names and personal fields with references or hashes before exporting. Columns are read from the file in your browser so you can map them; the file itself is uploaded when you pay.

6. The review rule and adverse outcomes

Outputs a person must review (comma separated, as they appear in the log)

…or when amount is at least (optional)

…or when score is at least (optional)

Adverse outputs (the ones that go against the person; reason codes are tested on these)

7. Approved models and retention

Model inventory (one per line: model, version, approval date)

Any model version found in the logs that is not listed here is a finding.

Decision records are kept for (days; leave blank if not defined)

8. Prompts

Say yes if the system is driven by prompts: a language model or other generative model reads an instruction (the prompt) plus the case and produces the decision. Six prompt-governance checks then apply. For a scoring, classification or rules model they are reported as not applicable and left out of the score.

Does this system use prompts?

No: a scoring, classification or rules model Yes: a language model with prompts

9. Practices

Answer from what you can show. "Unknown" and blanks are reported as Not evidenced, which is scored like a gap. Evidence is optional and is printed in the report next to your answer.

10. Remediation capacity

Days per week your team can spend on remediation

11. Pay and run

$750 for the full Evidence Pack, one workflow. Card via Stripe. Receipt from Stripe. Refund on request, no questions.

I understand the pack is generated by software from my answers and logs, is not reviewed by a person, and is not an audit opinion, certification or legal advice.

I have removed personal data from the export, and I accept the privacy and retention terms (files deleted after 30 days).

Bickford Technologies · Philadelphia, PA · derek@bickfordtechnologies.com