Who this is for
Management, legal counsel, privacy officers, IT and risk leaders in organizations that already use AI, develop AI-based products, or sell into the European market.
The regulatory landscape
European Union. The EU AI Act also applies to Israeli and other non-EU companies that place AI systems on the EU market or whose system outputs are used in the EU. An amendment in force since July 2026 deferred obligations for high-risk systems: to December 2027 for stand-alone systems, and to August 2028 for AI embedded in regulated products. Some obligations, such as the prohibitions on certain practices, already apply.
Israel. There is currently no dedicated AI legislation. General law applies, primarily the Privacy Protection Law, alongside the government's AI policy principles and sector regulators' guidance.
Standards. ISO/IEC 42001 (AI management systems) and the NIST AI Risk Management Framework are voluntary, and increasingly used as a baseline by customers and investors.
How the work is done
Use case mapping. Which tools are in use, by whom, for what tasks and with what data. Including AI features embedded in existing software.
Risk classification. Which uses are permitted, which require review and which are prohibited.
Policy and rules. An AI use policy, data input rules, human review of outputs and an exceptions process.
Vendors. Reviewing terms of use, data retention, model training and permissions.
Training and review. Role-based training and a periodic update cycle.
Possible deliverables
- Tool and use case register
- AI use policy
- Tool approval process
- AI risk assessments
- DPIAs for AI systems
- EU AI Act readiness
- Support for ISO/IEC 42001 adoption
- Training for management and staff
Law and accounting firms
Professional firms have a dedicated track, with self-assessment tools that require no call: AI for Professional Firms. For law and accounting firms, the firm also offers an AI use Quick Scan: mapping actual use, the main gaps and priorities for action.