
1. Readiness Assessment
A review of your company as the people who have to say yes will see it: a regulated buyer, a regulator, a partner or an investor.
What it covers
- The 6Sense screening: first the red lines and the risk of misuse, then the six dimensions
- An AI Compass baseline: where you stand on the questions buyers, regulators and investors ask about AI governance, security and suppliers
- Your EU AI Act classification, and what follows from it
What you get
A written report with the findings, the two or three issues most likely to stop a deal, a licence or a funding round, and a 90-day plan in priority order. If the honest answer is that you are not ready yet, the report says so.
Time and price
About three weeks from the first working session. Fixed price, quoted before we start.

2. Board, Advisory and Mentoring
A board seat, a standing advisory role or a mentoring agreement, for a fee agreed in advance.
BOARD MEMBER: governance structure, investor relations, and structured decisions on risk. Board-level accountability.
STRATEGIC ADVISER: a fixed number of days a month on the work the assessment identified, with deliverables agreed for each quarter.
MENTOR: regular one-to-one conversations with a founder or a leader about the decisions in front of them.
3. Executive Partnership
Hands-on executive support in a critical period: a funding round, a licence application, a regulatory audit or a first large institutional customer. Attolloo works inside the company, alongside the management team, on leadership, security, or people and organisation, depending on what the company needs.
This is the only form that can include equity. It is paid in fees, and in some cases partly in equity or a share of revenue. The split is agreed case by case.
An executive partnership is offered by agreement, and only to companies that have been through an assessment. Scope, start date and the time committed are set in each case.
Why Fees Come First
An adviser who works only for equity ends up choosing companies by what their shares might be worth. A fee for a defined piece of work keeps the first step small for you, and keeps my advice independent of whether we continue.

Who This Is For
Early-stage AI companies entering a regulated market, typically 12 to 36 months after first product launch. There are two kinds.
CHALLENGERS: companies that use AI to compete with the established players, in finance, insurance and other regulated services. They become the regulated party themselves, and have to convince a regulator, a partner and an investor.
SUPPLIERS: companies that sell AI to the established players. They have to get through the buyer's procurement and security review.
The sectors I know best:
- Fintech and Regtech: EU AI Act, DORA, MiFID II and GDPR as conditions for doing business
- Compliance automation: regulatory monitoring and governance documentation
- Cybersecurity services: NIS2, DORA and sector security requirements
- HR technology: AI in hiring and workforce management, high-risk under EU AI Act Annex III
What falls outside
Companies outside regulated markets, hardware without a software governance layer, health and life science, and companies without paying customers. Any company that fails the red-line check that opens the 6Sense Filter is also excluded.
Attolloo does not take on companies that compete in the pension market, companies whose main customers are pension providers or the public sector, or companies that supply, or are bidding to supply, my current employer.