Underfold
john@underfold.co Book a call
← Front page  ·  The practice

Work with me.

Everything I offer is fractional — a part-time, experienced pair of hands and a calm voice, shaped to what you actually need. No packages, no tiers, no 200-page deliverables. We start with a conversation.

Get in touch
A short call is the best place to start.
Book an intro call →
Format
Fractional — days, hours, or outcome
For
SMEs · Leaders & Tech leaders
Anchored to
ISO 42001 · NIST AI RMF · EU AI Act
Pricing
Shaped on the call — no rate card

Six ways in.

All fractional · Mix & match · Scope shaped to you
01Ongoing

Fractional AI governance

Part-time, ongoing ownership of your AI governance — the steady hand and the named accountable person, without a full-time hire. Proportionate, defensible, and built for how you actually operate.

02Short engagement

AI governance gap analysis

A short, honest look at where you stand against ISO 42001, the EU AI Act, and NIST AI RMF — and what's proportionate to fix first. You get a clear picture, not a compliance scare.

03Short engagement

AI Amnesty & Cultural Review

Your people are already using AI — some of it you know about, most of it you don't. A no-blame amnesty that surfaces the shadow AI in your organisation, so governance gets built on reality rather than the org chart's version of it.

04As needed

Ethics discussions & consultations

A thinking partner for the hard calls — the cases where the answer is uncomfortable, the stakes are real, and judgement matters more than a checklist.

05As needed

AI strategy advice

Where AI actually moves the needle for you, and where it's just noise. A clear-eyed plan you can act on — not a hype deck.

06Ongoing

Thinking partner retainer

An external brain on retainer — async access, regular calls, and proactive heads-ups, for leaders running the day job while also figuring out AI. A calm, experienced voice who's seen this before.

How it starts.

Step 1

A conversation.

Thirty minutes. No deck, no pitch. We talk through where you are with AI, what's keeping you up at night, and whether I'm the right fit. If I'm not, I'll tell you who is.

Step 2

A short note.

If it makes sense to work together, I send a one-page note: what we'd do, how much of my time it takes, what it costs. Plain language, no surprises.

Step 3

Fractional from day one.

We work on the cadence the problem needs — a few days for a gap analysis, a standing rhythm for ongoing governance or a retainer. Roll on, roll off, monthly.

Anchored to the standards that matter.

Every engagement is grounded in the frameworks your regulators, customers and board will ask about — used as a backbone, not a binder to drown you in.

Management system
ISO/IEC 42001:2023
The international standard for AI management systems — the structure your governance hangs from.
Risk framework
NIST AI RMF
A practical, voluntary framework for identifying and managing AI risk across its lifecycle.
Regulation
EU AI Act
The risk-tiered law shaping how AI is governed in Europe — and increasingly, the global baseline.

Why me.

25 years across financial-services technology and cyber security. Man Group, Generation Investment Management, Crossword Cybersecurity. Sys Admin to Director of Infrastructure and Operations — budgets, boards, regulators, and 3 a.m. on-call rotas.

Now ISO 42001 Lead Implementer, Advanced AI Governance Practitioner, MBA — but more importantly, I'm doing this work right now, every day, with real organisations. That's what makes me useful. Not the certificates. The fact that I've been where you are.