Skip to main content
Colorado ADMT: 1 Jan 2027 · EU high-risk: 2 Dec 2027 (Annex III); 2 Aug 2028 (Annex I)
Implementation support · Separately scoped service

AI Governance Implementation Sprint

Put clear owners, practical checks and usable records around your business’s use of AI.

Your team may already have policies, templates and supplier documents. A Sprint helps you apply them to an agreed business use case, identify unfinished work and decide who takes the next step.

Scope, fees, working sessions and deliverables are confirmed in writing before work begins.

Content revised: 28 October 2026 (service scope and enquiry information).

A clearer answer to four questions

  • Where is AI being used, and who owns it?
  • What must people check or approve?
  • Which records support those decisions?
  • What still needs to be done, by whom and when?

“Evidence” means the records behind an answer, such as an approval, supplier response, test result or staff review.

When a Sprint can help

AI projects can stall when policies are broad, supplier answers are incomplete or nobody knows who can approve the next step. Teams can also spend time recreating records each time a customer or manager asks the same question.

A Sprint is useful when you have a real use of AI to review and a sponsor who can assign owners and make decisions. Agree a focused starting point, such as one AI support assistant, one business function or one customer review.

An Indian global capability centre

Your parent company has AI policies, but your local team needs to establish which checks apply, who performs them and what local records are missing.

An Indian business serving EU customers

A European customer asks how you use AI, supervise its outputs and manage suppliers. You need a structured review and records that support your answers.

A team introducing AI agents

AI can take actions through connected tools. Your team needs to document permitted actions, human approvals, stop procedures and the tests needed before use.

Work we can cover

Select the work that matches your situation. The proposal identifies the products and activities included; every Sprint does not include every workstream below.

AI Controls Toolkit (ACT)

Assign responsibility and define operating checks

Explore ACT

Use relevant ACT records to describe the AI use case, name decision owners, review suppliers and document when a person must approve an action.

For AI agents, review proposed permissions and connected tools, including Model Context Protocol (MCP) connections where relevant. Plan stop and recovery checks, and record the results supplied by your technical team.

Move78 EU AI Act Deployer Evidence Pack

Organise an EU-focused review

Explore the Evidence Pack

Use your existing information and relevant EU AI Compass findings to identify questions requiring follow-up. Adapt selected records for oversight, supplier information, transparency, incidents and changes.

Connect customer questions to available supporting records and list the answers you still need. Questions about your legal role or obligations are recorded for appropriate specialist review.

Move78 AI Literacy & Human Oversight Training

Prepare staff to review and escalate

Explore the Training

Identify relevant staff roles, select suitable existing lessons and practice activities, and discuss how your team will review AI outputs and raise concerns.

Where agreed, use the accompanying workplace forms to record learning needs, review responsibilities and follow-up actions. The proposal specifies any facilitated sessions.

What you can receive

The written scope selects the outputs below and specifies their format and review process. Each output distinguishes information provided by your team from gaps that still need to be resolved.

A focused view of your AI use

Systems, business purpose, suppliers and organisational boundaries included in the review.

A responsibility map

Named people responsible for operating checks, reviewing information, approving decisions and handling concerns.

Adapted working records

Agreed ACT, Evidence Pack or Training materials adapted using the information your team supplies.

A list of missing information

Open questions, missing supplier responses and checks that still need to be performed.

A management or customer review summary

A concise account of what is documented, what remains open and which decisions need attention.

A prioritised 30-day action plan

Next actions, owners, target dates and review points for your team after handover.

The 30-day action plan describes the next period of work. It is not a promise that all implementation or compliance work will be finished in 30 days.

How the engagement works

1. Discuss the business problem

Describe the AI use, the question you need to answer and your target date. We review whether a Sprint is suitable and which materials may help.

2. Agree the scope and quote

Confirm the use cases, participants, records to review, deliverables, working sessions, fee and timing. Product licences and any additional work are identified separately.

3. Work through the selected materials

Your owners bring the relevant information. Move78 helps structure the review, adapt agreed records and identify unresolved questions. Your team performs the operational and technical checks.

4. Review and hand over

Review the agreed outputs, record remaining gaps and confirm the next actions. Your sponsor decides what can proceed and what needs further work.

Who does what

Move78

  • Structures the agreed working sessions.
  • Helps adapt selected product materials.
  • Reviews supplied information for gaps within scope.
  • Helps organise decisions and follow-up actions.

Your organisation

  • Provides an accountable sponsor and relevant owners.
  • Supplies accurate, approved information.
  • Performs and verifies technical or operational tests.
  • Approves decisions and maintains the records after handover.

The service does not include operating your systems, ongoing monitoring, legal advice, certification or an assurance that a regulator, auditor or customer will accept the outcome.

Two examples of a scoped Sprint

Illustrative scenarios. These are not customer testimonials or reported results.

1. A global capability centre introducing an AI assistant

The problem: An Indian GCC wants to use an AI assistant for internal support. Its parent has a global policy, but local ownership, permitted actions and incident responsibilities are unclear.

The work: Use selected ACT records to map the assistant’s tasks and access, compare the available parent-company records with local needs, identify approvals and plan stop-and-recovery checks.

The handover: An agreed set of adapted records, named local owners, questions for the parent or supplier, and an action plan covering tests and decisions still required.

2. An Indian services company answering an EU customer

The problem: An EU customer asks how the company manages AI used in customer support. The team has supplier documents but no consistent record of its own review.

The work: Start with relevant free EU AI Compass checks. Use the Evidence Pack to organise available records, oversight arrangements, supplier questions and proposed responses. Include relevant Training materials if staff preparation is in scope.

The handover: A structured review record, a draft response supported by available information, and a list of unresolved actions for the company’s owners.

Having EU customers is a reason to review the situation. It does not, by itself, determine which EU AI Act obligations apply.

How the free tools, products and Sprint fit together

EU AI Compass provides free guided tools and guides to help you identify relevant questions and possible gaps. They rely on your answers; they do not inspect your systems.

Move78 products provide editable materials and structured learning that your team can use internally. An Implementation Sprint adds separately agreed help applying selected materials to your situation.

You can continue using the free resources or purchased products independently. A Sprint is an additional service for teams that want implementation support.

Fees, delivery and support

The Sprint is quoted separately from the digital products. The fee depends on the agreed use cases, available records, workstreams and support required.

Written proposal before kickoff

The proposal sets the fee, currency, applicable taxes, payment schedule, deliverables and what your team must provide. It identifies any required product licences and whether they are included or purchased separately.

Agreed working sessions

New engagements confirm the delivery format, number and length of sessions, participants and timetable in writing. Scheduling depends on mutually agreed availability.

Handover and follow-up

The proposal defines the review rounds and any follow-up support. Continuing implementation, additional use cases and ongoing support require a separate agreement.

Changes, rescheduling and cancellation

Any change in scope is discussed before additional work begins. Service-specific payment, rescheduling and cancellation terms are set out in the agreement and applicable published policies.

Existing Sprint agreements retain their agreed commitments. Where an existing agreement includes six remote sessions within 30 calendar days of the first scheduled session, that commitment remains unchanged. See Terms, Refunds and cancellation and Support.

The digital-product 30-calendar-day refund-request window does not automatically apply to Sprint services.

Questions before you enquire

Do we need to buy ACT before discussing a Sprint?

You can start with an enquiry. Describe your current materials and the work you need help with. The scope review confirms which product licences are required and how they will be supplied.

Can we use records we already have?

Yes. Start with your existing policies, system list, supplier information and review records. The agreed work identifies what can be reused, what needs adapting and what is missing.

Can a Sprint cover both ACT and the EU AI products?

A proposal can include relevant work across the products where it fits the agreed use case. Each workstream, licence and deliverable must be identified in the scope.

Will Move78 configure our AI systems or install controls?

System configuration, software development, production testing and ongoing operations are outside the standard Sprint described here. Your technical team performs those activities. Move78 helps organise the agreed checks, records and follow-up decisions.

Will this make us compliant or certified?

A Sprint supports practical implementation and record keeping. It does not provide a legal opinion, certification or a guaranteed compliance outcome. Your organisation remains responsible for its decisions and for obtaining specialist advice where needed.

What if some information is missing?

Record the gap, the person responsible for resolving it and its effect on the next decision. A missing supplier response or unfinished test remains an open action; it is not treated as completed work.

Your next step

Tell us what your team needs to get done

Use the existing support form to request a Sprint fit review. Include:

  • Your company and a short description of the AI use case.
  • The question, customer requirement or implementation problem you need to address.
  • Your target date, preferred timezone and relevant team members.
  • Any Move78 products or existing records you already use.

Start with a high-level summary. Do not send passwords, production data, confidential documents or unnecessary personal information through the enquiry form.

Or email contact@move78int.com.

Source review dates are stated in the relevant guides. Source and review note: This page describes bounded implementation support. It is not legal, tax, audit, certification, conformity-assessment, buyer-approval, safe-harbor, or security advice. Scope, delivery, payment, and availability should be confirmed before engagement.

Built by Abhishek G Sharma, founder of Move78. 20+ years in cybersecurity and risk management. ISO 42001 Lead Auditor, ISO 27001 Lead Auditor, CISA, CISM, CRISC, CEH, CCSK, CAIGO, and CAIRO. Also the architect of EU AI Compass, a separate privacy-first EU AI Act tools site.