aicost.ai
AI cost and governance assessment · continuous governance

Governance that becomes operational.

Twenty modules, 247 controls, connected to your real systems. The findings are priced in dollars, the decisions are compiled into policy your gateways load, and the result is re-proved nightly in a journal you can verify yourself. Not a consultant's document that is true for a week.

20governance modules
247controls, each priced and owned
200assessment questions
4 + USframeworks plus 2026 state law
Nightlycontinuous re-proof
Why cost and governance start together

The same workload decisions shape cost, risk, policy and proof.

The usual sequence is build the thing, watch the spend, add governance when somebody asks. That order produces a surprise bill, a risk discovered after deployment, and a governance document that is stale the week it is signed. AICost models the workload once and uses the same variables for both views.

Cost-only approachCost and governance from day one
Build first, spend appears later, governance added after launch, then surprise bills and an audit scrambleModel the workload, add governance requirements, set runtime policy, operate in production, prove with actuals and evidence
Misses full AI TCO: evaluation, guardrails, human review, observability, data pipelines, maintenancePlans before the first invoice, with the governance premium priced as part of TCO
Finds risk after deploymentBuilds controls into the design: eligibility, residency, oversight settled before build
Turns governance into a stale documentCreates a continuous operating loop: plan, control, prove, re-model
One example. An agent loop has a cost view (turns per task, tokens per turn, tasks per day, runaway probability) and a governance view (maximum turns, maximum cost per task, fallback model, pause or kill, human review threshold). They are the same variables. Modelling them once is why the policy is consistent with the economics rather than negotiated against them.
Why AI cost and governance must start together on day 1: cost-only approach vs day-1 approach, integrated lifecycle, examples
Cost-only vs day-one. The integrated lifecycle from design to evidence, with the agent loop and support RAG examples. (tap to open full size)
What the assessment covers

Twenty modules. A complete view.

Five groups, four modules each. Every module is scored from evidence where we can read it and from a scoped questionnaire where we cannot, and every finding it produces carries a price, an owner and a remediation window.

Discover

Find, understand, get ready

What you have before you spend more

  1. AI inventory and shadow AI: every tool and workload, built from metered spend and identity, not a survey
  2. Data and knowledge readiness: is the data clean, classified and licensed for RAG, fine-tuning and agents
  3. AI identity and least privilege: which users, agents, keys and service principals can call which models
  4. Licensing, procurement and sprawl: seats, tiers, NCE and vendor subscriptions vs actual usage
Secure and comply

Reduce risk, meet requirements

Controls that hold in production

  1. Security control plane: gateway, guardrails, DLP, prompt-injection and PII screening in the path
  2. Privacy, confidentiality and IP: what data reaches which vendor, retention and training defaults, contracts
  3. Regulation, audit and compliance: obligations mapped to the frameworks below
  4. AI incident response: detection, kill switch, reporting clocks, post-incident evidence
Prioritize and design

Value and the right architecture

Which workloads, on what

  1. Value and workflow intelligence: which workloads are worth building, priced per business unit
  2. Workflow integration: how AI plugs into existing systems, CI/CD, gateways and approvals
  3. Model and vendor selection: eligible models per route with six gates applied in order, price last
  4. AI cloud architecture: Bedrock vs Foundry vs Vertex vs direct APIs, regions, capacity, self-host break-even
Govern and control

Turn decisions into controls

Where the cost engines become policy

  1. AI cost governance and FinOps: budgets, ceilings, attribution, showback, forecast vs actual
  2. Agents, MCP and autonomous actions: turn limits, envelopes, tool permissions, runaway protection
  3. Quality, evaluation and assurance: golden sets, eval gates, drift checks before any model swap
  4. Vertical governance: healthcare, legal, finance and public-sector rules, no-downgrade zones
Operate and adopt

Enable people, prove value

Making it stick

  1. Copilot readiness and value: seat ROI, adoption depth, subscription vs metered per developer
  2. Adoption, training and change: skills, usage policies, champions, AI literacy pack
  3. Shared responsibility and operating model: who owns what across platform, security, finance and business
  4. Evidence, reporting and continuous improvement: ledger, oversight log, recertification, board and audit packs
20modules
200questions
247controls
11deliverables + deck
3 wksto first enforcement
Standards, mapped once

One control register, mapped four ways, plus the state layer.

CSA AICM is the spine: 247 controls expanded into the questionnaire. Answer once and the obligations matrix reports across every framework, so the same evidence answers the auditor, the regulator, the board and the security team.

The spine

CSA AI Controls Matrix

247 controls, 18 domains. The most technical of the four, so platform and security teams can implement it. Feeds the STAR for AI working sheet.

Certifiable standard

ISO/IEC 42001

The AI management system. Proves governance runs as an operating system, not a document. Procurement increasingly asks for it.

US framework

NIST AI RMF

Govern, Map, Measure, Manage, with the Generative AI profile. Our eval gates are Measure; the enforcement ladder is Manage. OSCAL export into your GRC tool.

Binding law

EU AI Act

Risk classification per workload; Article 14 oversight log, Article 15 eval heartbeat, Article 50 transparency, Article 73 incident clock, Annex IV pack regenerated from the journal. Dates tracked as the Digital Omnibus moves them.

2026 state layer

California, Texas, Colorado

SB 53, AB 2013, SB 942, AB 489 (healthcare), Texas RAIGA, Colorado ADMT. Every obligation dated and watched at 90, 30 and 7 days.

Connected to your real systems

Evidence first. Questionnaire last.

Read-only. Never in your inference path. No prompts or content. Every source file is hashed into the evidence store before it is parsed, so even an unparsed export is valid evidence.

Microsoft 365 and Entra

  • Entra ID roles, PIM, Conditional Access, sign-in logs
  • Defender for Cloud Apps discovered AI apps
  • Licensing and NCE SKUs, Copilot seats and usage
  • SharePoint data access, Purview DSPM for AI

AWS Bedrock

  • CUR 2.0 with resource IDs and caller identity
  • Model invocation logs, per-agent inference profiles
  • Cost allocation tags at the payer account
  • Cross-account read role, under $2 a month

Azure AI Foundry and GCP Vertex

  • Cost Management export, per-deployment RBAC
  • BigQuery billing export, labels honored
  • Azure Monitor token metrics, PTU showback
  • Org-policy publisher allow-lists

Vendors, gateways and finance

  • Anthropic, OpenAI, Google usage APIs
  • LiteLLM, Portkey, Cloudflare, Kong, OpenRouter
  • Corporate card and AP exports for shadow AI
  • Vendor trust and DPA pages, hashed and dated
Where we cannot read it, we ask precisely. A scoped questionnaire is generated from the 247 controls for your profile, must-tier first, typically 200 to 300 questions. Every answer carries a justification, an evidence link and an assurance level (self-attested, evidenced, verified). The output is audit-grade, not a checkbox survey.
The policy engine

Governance you can load, not just read.

Eleven intake questions, ordered so a low-sensitivity workload finishes in three and a regulated one earns the long path. Six gates applied in order per route. Price is last on purpose: a model that fails residency is not expensive, it is ineligible.

1Residencywhere processing may stay
2CertificationSOC 2, ISO, HIPAA BAA, AI Act
3Training datavendor defaults, contractually off
4Tierconsumer, team, enterprise plan
5Capabilityfits the workload shape
6Priceonly among what survived
route: legal / contract-review   data_class: regulated   residency: EU
gpt-5-mini      FAIL gate 1  EU residency unavailable on this route
llama-3-hosted  FAIL gate 3  training default on, no contractual opt-out
claude-sonnet-5 PASS        bedrock-eu-central-1, BAA in place, training off
→ policy_patch: model_list, budget cap, no-downgrade zone, approval above cap
Output

Configuration, not advice

policy_patch for LiteLLM, Portkey, Cloudflare, Kong and OpenRouter; Bedrock IAM per-model conditions; Azure RBAC; Vertex org policy; vendor-console caps for teams on direct keys.

Trace

Every elimination explained

A plain-English reason for every model ruled out, with the vendor fact relied on and the date it was captured. Defensible to the same auditor for marketing and for legal.

Templates

Six postures, chosen by the answers

Open and cost optimized; internal business; regulated personal data; health or financial with agreement; export-controlled; self-host or open weight.

From policy to enforcement

The graduated ladder.

The first four steps remove cost, the fifth asks a person, the sixth stops. Regulated work can be marked a no-downgrade zone, which skips the economy route entirely. A blunt cap treats a legitimate spike and a pathological loop identically; this does not.

WARNrecorded and notified

Cost velocity or context growth crosses a threshold. Nothing restricted.

CONSTRAINcache, reuse, compact

Above plan but legitimate. Cost removed before capability.

DOWNGRADErouted to economy

Routine substeps move to a cheaper route that passed eligibility.

GATEquality gate

The cheaper route must still pass the accepted evaluation.

APPROVErequires a person

Spend beyond the envelope is a recorded human decision.

BREAKpause or kill

Loop outside the hard envelope. Smallest useful scope, journaled.

Continuous governance

The assessment that re-proves itself every night.

A report describes a state at a point in time. This is generated from the live model on demand, so the answer given to a board in October and to an auditor in January come from the same source, and the journal shows what changed in between.

CadenceWhat runsEvidence produced
DailyCost actuals ingest, bill vs gates, engine auditPer tenant, workload and agent showback; untagged spend as a named residual
WeeklyThe seven watchersJournaled sweep, drift rows, alerts to Slack or webhook
MonthlyBranded drift reportChain-verified, HMAC-signed, with the verify command
QuarterlyAccess recertificationWho can call vs who did; unused grants and unknown actors
ContinuousArt. 73 incident clock, Art. 14 oversight log, Art. 15 eval heartbeatAnnex IV pack regenerated on demand from the journal
1Premium drift2Model eligibility3Vendor evidence4Regulatory 90/30/75Inventory hygiene6Findings burn-down7Bill vs policy
Why continuous beats annual

Drift caught in days, not at renewal

A model repriced, a vendor certificate aging out, an owner leaving, an agent tripling its retries: named and dated. Serious incidents open with the 15, 10 or 2-day deadline attached, and overdue renders red before a regulator asks.

Cost and governance in one loop

Watcher 7 reconciles the bill against the policy

What the ceiling prevented becomes a reportable line, not an anecdote. FinOps tools have half of this; GRC tools have neither. Audits, insurers and procurement get current evidence instead of last year's document.

Assessment, not paperwork

How this differs from the usual governance assessment.

The usual assessmentAICost
Questionnaire and interviews; findings rest on what people rememberConnected to real systems. Entra ID, Defender, licensing, Bedrock CUR and logs, Azure and GCP exports, gateways, corporate card and AP exports. Evidence first; a scoped questionnaire only for what cannot be read.
Maturity heatmap in five colorsThe Compliance Premium in dollars. What governing your AI costs, per control and per system, computed by engines you can re-run.
A policy memo nobody can enforceA policy engine. Six gates per route with the elimination reasoning shown, exported as gateway config or IAM conditions.
Numbers estimated by an analyst120+ deterministic engines in MCP chains. No model calls inside the math; same inputs, same answer, auditable.
A PDF that is true on delivery dayContinuous governance. Watchers, heartbeats, incidents and recertification keep it true; every event HMAC-signed.
Governance as a separate program from costOne loop. The cost engines are the policy engines. The ceiling a team lead agreed to in a meeting is the ceiling enforced in production, produced by the same code.
A rip-and-replace platformYour stack stays. FinOps, GRC, gateway and observability tools keep doing their jobs; we add the decision layer and export FOCUS, OSCAL and STAR back into them.
Twelve core AICost philosophies
The twelve operating principles behind every engine and every policy, and what they mean for customers. (tap to open full size)
What you hold at the end

Eleven deliverables, plus a ten-slide executive deck whose closing slide asks for decisions.

01Executive report and risk heatmap
02AI inventory and use-case catalog with owners and tiers
03Obligations matrix across all frameworks
04Findings register, priced and owned, with remediation windows
05Compliance Premium: your governance cost in dollars
06Model eligibility matrix per route with elimination trace
07Policy patch for gateway or IAM, ready to load
08Vendor evidence pack, hashed and dated
09Target operating model and shared responsibility
10Hash-verified evidence register and journal
11Stop / fix / approve / scale roadmap with a price on every row
+Executive deck, and MCP access to every engine after we leave
NIST OSCALfindings into your GRC toolCSA STARLevel 1 working sheetFOCUS 1.xcost data into your FinOps toolmodel.jsonre-run anything, prove everythingAnnex IVtechnical documentation pack
How to start

The service ladder. Every step credits forward.

01

AI Act Quick-Check

Free, 2 minutes

Your EU AI Act risk class and likely obligations. No signup wall.

02

Take-Stock Session

One hour, fixed fee

Your issues taken stock of, two workflows named and priced, a same-day written plan.

03

AI Opportunity Snapshot

One week

Where money and hours leak, fastest ROI, daily cost visibility, governance cleared before you build.

04

Cost, Workflow and Governance Assessment

Three weeks, fixed fee

Inventory, 247-control mapping, Compliance Premium, stop / fix / approve / scale roadmap.

05

Continuous Governance

Flat monthly per tenant

The assessment that re-proves itself every night. Resellable per client for MSPs.

Questions we get

Straight answers.

Do you see our prompts or customer content?

No. Read-only cost and usage, a team-scoped key convention, a workload description and an owner per workload. No prompts, completions or customer data, and no production access.

Do you sit in our inference path?

No. Traffic keeps flowing application to gateway to vendor as it does today. Policy goes out as configuration; actuals come back to the ledger.

What access do you need, exactly?

A read-only role scoped to cost and metadata, revocable by you at any time. On AWS that is a cross-account role with a per-customer external ID and two S3 prefixes; on Microsoft, read-only Graph and Defender permissions; on Azure and GCP, the cost export.

How do we verify you never edited the record?

Every monthly report ships with the command you run yourself against the hash-chained, signed journal. If a single entry had changed, verification fails.

How is success measured?

Five objective criteria your own team can verify: a per-team cost number that did not exist before, at least one structural saving with the arithmetic shown, a policy patch loaded by your gateway, a working enforcement event you trigger deliberately, and forecast accuracy scored as a percentage.

Does this replace our FinOps or GRC platform?

No. FinOps platforms hold cloud actuals, GRC platforms hold controls and attestations, gateways route requests, observability holds traces. None of them owns the complete workload economic decision. That is the gap AICost fills, and it exports back into each of them.

Partner with us

Everyone else sells you a photograph of your compliance.

We sell you the camera, running nightly. One workload, one exhaust path, first graded report in 48 hours.

✉ [email protected]
Confidential · part of the Agentic AI infrastructure by CloudIntelligence.ai
Book a Take-Stock Session →