How engagements are structured
Afrispan is currently founder-funded and pre-revenue, and has not yet validated pricing against a real client engagement. Rather than publish a rate card ahead of that validation, here is the shape of how each engagement type works. Every engagement is scoped and quoted directly, after a discovery conversation about your specific system.
- A defined Conformity Report, FRIA, or Cross-Border Framework deliverable
- Scored against relevant frameworks simultaneously
- Untested obligations marked explicitly, never silently omitted
- A concrete, reviewable deliverable, not an open-ended retainer
- Automated decision routing to pass, fail, or human-review queues
- An independent kill-switch and named-person resume mechanism
- Built on real, demonstrated orchestration infrastructure
- A defined verification step before the engagement is considered complete
- Continued drift monitoring and regression alerting
- Periodic re-assessment as your AI system evolves
- The natural next step after an initial engagement, not a required starting point
- AI-powered automation for sales, support, lead management, or internal operations
- The same assurance discipline built in from day one
- Often the entry point for a client, with governance capability introduced in the same engagement
Afrispan's pricing is being developed to be genuinely accessible to Nigerian SMEs, not a scaled-down version of global consultancy rates, anchored against real Nigerian professional-services benchmarks and international SME compliance-audit reference points, not invented figures. A published rate card will follow once pricing has been validated against real client engagements. Until then, every quote reflects your specific system, scope, and evidence needs, discussed directly.
Common questions about working with Afrispan
Is Afrispan an established company?
Afrispan is a newly founded practice, built on its founder's decade of enterprise technology risk and delivery governance experience, not a venture without a track record.
How do I know your technical claims are real?
Every methodology described on this site is published, open-source, and independently checkable, not asserted in a proposal. Full technical portfolio: github.com/Afrispan-AI/ai-governance-suite.
What do we get after an AI Governance Gap Analysis?
A clear, honest picture of where things actually stand, not a generic template report:
- Full AI systems inventory: every system currently operating across the business, including the ones that crept in without anyone formally deciding to adopt them.
- Use-case risk assessment: each system assessed for its actual risk, not a blanket rating applied across the board.
- Accountability findings: where ownership is genuinely unclear, who owns a decision and who'd answer for it if something went wrong, named directly, not glossed over.
- ISO/IEC 42001 alignment check: showing exactly where a future certification effort would need to focus.
- Prioritised remediation roadmap: ordered by actual risk, not by what's easiest to fix first.
- Board-level executive summary: distilled for board reporting, not a document only a technical team could use.
What does the Gap Analysis consultation actually involve?
A direct working session, not a form to fill in:
What's actually in use
Where AI is genuinely operating across the business right now.
Who's accountable
Who answers for it if one of those systems gets something wrong.
What data is involved
What company and client data is really flowing through it.
Supplier exposure
Whether a vendor has quietly introduced AI into a process without anyone signing off on it.
Where the exposure sits
The real operational or commercial risk, named specifically.
What to fix first
What needs addressing immediately versus what can reasonably wait.
Why isn't pricing listed on this site?
Contact us directly for scope and cost specific to your situation.
Is this a one-time assessment, or ongoing?
Both, depending on your need. A Conformity Report or FRIA is a fixed-scope engagement. Once that foundation exists, ongoing monitoring for drift and regression is available as a recurring service.
What does an engagement actually involve, start to finish?
Initial scoping and system inventory, assessment against the relevant frameworks, documented findings with evidence tagged honestly by strength, and, where the engagement includes implementation work, building the actual governance infrastructure, followed by a defined verification step.
Do you need access to our system's code, or can this work from documentation alone?
It depends on the assessment's depth. A Conformity Report can often proceed from documentation and stakeholder interviews. Technical evaluation, red-teaming, drift monitoring, requires real access to the system itself, since these findings can't be produced from paperwork.
Which frameworks do you assess against?
The EU AI Act, NIST AI RMF and its Generative AI Profile, and ISO/IEC 42001, mapped simultaneously in a single Conformity Report rather than assessed one at a time.
What if the Digital Economy and E-Governance Bill's timeline changes?
The underlying discipline holds value regardless of one bill's exact passage date. Independent verification that an AI system is safe and well-governed is worth having whether mandatory enforcement lands this year or later.
Get a scoped quote for your system
Start with a discovery conversation. No commitment, no login required.