Statement of Work
Audit-Ready Automation Sprint
A fixed-scope sprint to design, build, and deploy one production workflow in the client environment — fully logged and traceable, with a human-oversight checkpoint — so the automation survives internal audit, a regulator, or a customer challenge. Built compliant by design for the UK, EU and US.
- Provider
- Virticus Advisory
- Valid for
- 30 days
- Timeline
- 1–2 weeks
- Fixed fee
- £6,000 – £25,000
Provider legal-entity and office details are confirmed in the engagement terms.
1. Scope (fixed)
- 1 workflow, 1 integration surface, up to 3 decision points.
- Deterministic / traceable logging baked in — every action reproducible from the same inputs.
- One human-in-the-loop oversight checkpoint and handoff.
- A short defensibility note: what it does, how it is logged, how it is controlled, and which regime it maps to (UK data/AI regulation · EU AI Act · US lending & NIST).
Candidate first workflows (we select one together)
- Document / KYC intake + triage with a full decision log
- Claims or case triage with human-in-the-loop checkpoints
- Case / file summarisation with source citations and an audit trail
- Fraud / exception flagging with an explainable, reproducible rule path
2. Out of scope (this sprint)
Additional workflows, further integrations, model training on client data, production on-call / SLA, and regulatory sign-off of the wider estate. Any of these can be added under an Embedded AI Team / Governance retainer (separate SOW).
3. Deliverables
- 1.Working automation deployed in the client environment
- 2.Decision / audit log — a reproducible record of every action
- 3.One-page control write-up (the defensibility note)
- 4.30-minute handover walkthrough
4. Timeline
1–2 weeks from kickoff, subject to environment access being available at kickoff.
5. Commercials
Fixed fee: £6,000 – £25,000 for the scope above. 50% on kickoff, 50% on delivery. Out-of-scope work is quoted separately before any is started. Prices exclude VAT.
6. Client responsibilities
- A named point of contact and timely access to the target system / environment
- Sample data (or a representative sandbox) at kickoff
- One decision-maker available for the scoping and handover sessions
7. Assumptions & change control
Scope is fixed; material changes are handled by a short written change note with any fee or timeline impact agreed before work continues.
8. Data & confidentiality
We handle client data under a confidentiality obligation and process it only to deliver this engagement. Data-protection specifics (controller / processor roles, retention) are confirmed in the engagement terms and align with our Privacy Notice.
9. Acceptance
Deliverables are accepted on completion of the handover walkthrough, or 5 working days after delivery if no issues are raised.
For Virticus Advisory
Name / title
Signature / date
For the Client
Name / title
Signature / date
Questions or ready to start? Contact hello@virticus.com.