For MSPs and compliance advisers
Turn AI governance requests into recurring client revenue.
Review each client's AI governance, resolve evidence gaps, and deliver a reviewed, dated evidence pack under your own brand. RIVAL keeps the evidence current for the next request.
The work starts when a client is asked how it controls AI: by a customer, an insurer, an auditor, a tender, or its own board.
- You buy
- RIVAL: the maintained delivery system that runs the work.
- You sell
- A recurring AI governance evidence service under your own brand.
- Your client receives
- A reviewed, dated evidence pack and a scheduled refresh.
The trigger
A client is asked how it controls AI
A customer sends a supplier questionnaire with an AI section. An insurer adds AI questions to the renewal. An auditor asks who uses which AI tools on which data. A tender asks for the AI policy and who acknowledged it. The board asks what the company would show if anyone asked.
Today the client turns to you, and the answer gets rebuilt by hand from email, spreadsheets, and old workshop slides. RIVAL turns that request into managed work with a reviewed answer, and keeps the evidence current for the next one.
The service you sell
The AI governance evidence service
One named, repeatable service you deliver under your own brand: review a client's AI governance, resolve the gaps, deliver a reviewed evidence pack, and keep it current on a review cycle. RIVAL guides every step, so the second client costs you less than the first.
- Scoped review
- Start from the request. Record who asked, why, which scope, and when it is due.
- Evidence, classified
- Every claim is current, stale, missing, unsupported, or not applicable. No guessing.
- Gaps with owners
- Each missing or unsupported claim gets one owner and one next action.
- Reviewed evidence pack
- A human approves the review. The pack is scoped, dated, and versioned under your brand.
- Changes since last time
- The next pack shows what changed since the previous approved review.
- Scheduled refresh
- A review cycle schedules the next review before evidence goes stale.
What your client receives
One reviewed evidence pack, and the record behind it
The pack answers the request with the records behind every statement. It is approved by a person, dated, versioned, and clear about what it does not cover. Anyone can assemble a PDF once. RIVAL keeps the review, gaps, and history current, so the next request starts from what already exists.
- Scope and request
- Which request the pack answers, which period it covers, and who approved it.
- Known AI use and controls
- Which AI tools are in use, by whom, on which data, and under which policy.
- Claims and evidence
- Each claim with its state and the records that support it, including imported evidence.
- Gaps and limits
- Missing or stale evidence, who owns it, what happens next, and the boundaries of the pack.
From request to reviewed pack
Ten steps, repeated for every request
-
01
Request
A client receives an external or internal AI governance request.
-
02
Scope
You record who asked, why, what it covers, and when it is due.
-
03
Map
RIVAL maps the request and its questions to versioned evidence claims.
-
04
Import
You attach or import the evidence the client already has.
-
05
Classify
RIVAL shows which claims are current, stale, missing, unsupported, or not applicable.
-
06
Assign
Missing and unsupported claims become owned remediation actions.
-
07
Resolve
AI map, policy, acknowledgements, drills, or other controls produce the missing evidence.
-
08
Approve
A person approves the review, which freezes claims, states, and links.
-
09
Deliver
RIVAL generates the reviewed evidence pack and its response index.
-
10
Schedule
Freshness rules and the review cycle schedule the next review.
What you can invoice
Bill the launch, the pack, and the review cycle
You set your own client prices. RIVAL gives you named work to invoice and a reason it repeats.
- Client launch
- Onboarding, the first scoped review, and the first reviewed evidence pack.
- Managed review cycle
- A monthly or quarterly fee for keeping the evidence current and reviewing changes.
- Requests and packs
- Each new customer, insurer, audit, or tender request answered from the current review.
- Remediation work
- Policy updates, role-specific practice, and other work that closes named gaps.
Your portfolio
See which client needs you today, and why
Follow the full path from request to reviewed pack
Operator · portfolio
Illustrative specimen
Client organization · Bakker & Partners
A customer sent a supplier questionnaire with an AI section, due in nine days. Three claims have no supporting record yet: the AI tool inventory, the policy acknowledgement for the marketing team, and the data-handling rule for the new CRM assistant.
Evidence events
- Request · received · customer questionnaire Mon 09:14
- Review · 3 gaps assigned · owners set Mon 09:31
Owner: you. Next step: import the tool inventory, assign the policy version to marketing, and add one short drill on data handling. That turns three missing claims into current ones before the due date.
Client organization · Northline Logistics
The quarterly review is complete. Every claim is current or not applicable with a recorded reason, and the last two gaps were closed this week. Approving the review freezes it and generates the pack.
Evidence events
- Review · gap resolved · policy acknowledged Fri 16:02
- Review · ready for approval Fri 16:10
Owner: you. Next step: approve the review and send the pack. The next review is scheduled for November.
Client organization · Van Loon Accountants
The current pack was approved in June. Two evidence items expire before the next review, and RIVAL will show them as stale on the review date so the refresh stays small.
Evidence events
- Pack · generated · version 3 Tue 11:05
- Cycle · next review scheduled Tue 11:06
Illustrative specimen from the product design. No live client data.
Evidence inputs
Bring evidence from the tools your clients already use
Most of the evidence already exists somewhere. RIVAL brings it into the review so a claim can point at a real record instead of a promise. The import workflow is not live yet; these are the inputs the first release covers.
Planned inputs for the first release
Manual evidence entry · file uploads and references · CSV imports · Microsoft 365 audit-log exports and supported audit APIs · awareness-platform reports such as training completions · exports from discovery, security, governance, and compliance tools.
Direct connectors, after that
Direct connectors to those tools come after the first release. None is live today, and we do not name one until it works.
RIVAL does not pull data out of Microsoft Purview; Microsoft 365 audit-log exports and supported audit APIs are the route. RIVAL does not replace Purview, discovery tools, KnowBe4, Vanta, Cynomi, or technical controls. It brings human, policy, review, and technical evidence together in your managed-service workflow.
Why it recurs
Evidence goes stale. Requests keep coming.
People join and leave. New AI tools appear. Policies change, acknowledgements age, and exports expire. Every quarter something in the last pack is no longer true.
The review cycle schedules the next review before evidence goes stale, and each new request starts from the current review instead of from zero. That is why the client keeps paying for the service, and why the second pack costs you less than the first.
AI Governance Core
AI Governance Core is included, with the literacy work inside it
AI Governance Core supplies the base claims, evidence rules, review structure, and gap actions your service runs on. AI Literacy Core sits inside it with maintained principles, scenarios, and short drills. A drill is one way to close a gap when a review finds a role, judgment, or competence problem; each answer is stored against the exact content version the person saw. Maintained packs can extend the service later, after the base service works for you.
Try one drill 90 seconds
Pricing
Initial launch price: pay per operator and per active client
One subscription per operator firm. You set your own client prices. This is the initial launch price, and it excludes VAT where applicable.
€199
per operator per month
Three active clients included.
€49
per additional active client per month
An active client is one inside an active review cycle. Archived clients cost nothing.
No per-person or per-employee charge.
You set your own client prices and keep the client relationship.
Your economics, with your numbers
Enter your own numbers. Nothing is stored or sent anywhere; the sums run in your browser.
- Estimated client revenue per month
- RIVAL software cost per month
- Estimated contribution before delivery labour, taxes, payment fees, and other expenses
- Estimated contribution after your entered delivery labour, before taxes, payment fees, and other expenses
Estimates from your inputs only. Not a forecast, not a margin promise, and not advice.
Formula: RIVAL cost = €199 + €49 × (active clients above three). Contribution = active clients × your price − RIVAL cost. After labour = contribution − active clients × hours × hourly cost.
Worked example: 8 active clients at €350 per month is €2,800 revenue and €444 RIVAL cost, an estimated €2,356 contribution before delivery labour, taxes, payment fees, and other expenses.
Methodology and trust
What RIVAL measures, and what it does not promise
RIVAL records actions and current state: who uses which AI tools, which policies apply and who acknowledged them, which claims have supporting evidence, and what changed since the last review. A person links evidence to claims and approves every review. Approved reviews are frozen and versioned, and a correction creates a new version that points to the old one.
The evidence ledger is append-only in normal operation, with a visible correction trail; it is not cryptographically sealed, independently timestamped, or independently verified. RIVAL draws no automated legal conclusion, assesses no employee automatically, and issues no certificate. An evidence pack documents recorded actions and current state; it is not a legal opinion, and no insurer, buyer, auditor, or regulator is obliged to accept it.
Built for EU data rules: each client's data is isolated within its own organization, and transactional messages carry no tracking pixels. Hosting, storage region, and subprocessor terms are published before the first production client; until then we claim nothing about them.
First client launch
First client launch · €495
Start with one client and one real request, and leave with a reviewed evidence pack under your own brand plus everything you need to sell the service to the next client.
Included
- Operator onboarding
- One client organization
- One scoped request or review
- One reviewed evidence pack
- Own-brand client-facing material
- A service proposal or statement-of-work template, supplied during the launch
- The operator pricing and margin tool
- The €495 launch fee credited against your first three subscription months
The guarantee, and its limits
If a complete supplied evidence set cannot be converted into an approved evidence pack within 30 days, the launch fee is refunded.
A complete supplied evidence set means you and your client provided the scoped request, its source material, the existing records the review needs, named gap owners, and timely approvals, and answered our questions within the period. Missing cooperation, missing records, or late approvals extend the period; they do not trigger a refund.
The launch does not guarantee legal compliance, certification, insurer acceptance, buyer acceptance, procurement approval, or a completed pack without your client's cooperation.
To start a launch, sign in with your provisioned account or read how the service works.
For operators
You already do this work. Now it is one service.
As the operator, the MSP or advisory firm that runs the service, you already handle security questionnaires, policy work, awareness training, and audit questions for your clients. AI governance is the next question in the same conversation. RIVAL gives it one method you reuse across your portfolio, under your own brand.
Reduce manual evidence chasing. Turn every request into scoped, billable work. Provide regular reviews. Keep the client relationship, and add clients without adding administration.
Why your clients keep paying
Your clients get a reviewed answer when someone asks, one current view of their AI use and controls, clear ownership of gaps, and a maintained record of what they did. They benefit even when no regulator ever calls.
Keep reading, or use your provisioned account
How it works follows one client from request to reviewed pack. Docs explains the terms and journeys. Sign-in is for people whose access has already been provisioned.
Access is provisioned for MSPs and compliance advisers. There is no self-service signup.