VIRTICUSRequest Assessment

Statement of Work

Audit-Ready Automation Sprint

A fixed-scope sprint to design, build, and deploy one production workflow in the client environment — fully logged and traceable, with a human-oversight checkpoint — so the automation survives internal audit, a regulator, or a customer challenge. Built compliant by design for the UK, EU and US.

Provider
Virticus Advisory
Valid for
30 days
Timeline
1–2 weeks
Fixed fee
£6,000 – £25,000

Provider legal-entity and office details are confirmed in the engagement terms.

1. Scope (fixed)

  • 1 workflow, 1 integration surface, up to 3 decision points.
  • Deterministic / traceable logging baked in — every action reproducible from the same inputs.
  • One human-in-the-loop oversight checkpoint and handoff.
  • A short defensibility note: what it does, how it is logged, how it is controlled, and which regime it maps to (UK data/AI regulation · EU AI Act · US lending & NIST).

Candidate first workflows (we select one together)

  • Document / KYC intake + triage with a full decision log
  • Claims or case triage with human-in-the-loop checkpoints
  • Case / file summarisation with source citations and an audit trail
  • Fraud / exception flagging with an explainable, reproducible rule path

2. Out of scope (this sprint)

Additional workflows, further integrations, model training on client data, production on-call / SLA, and regulatory sign-off of the wider estate. Any of these can be added under an Embedded AI Team / Governance retainer (separate SOW).

3. Deliverables

  1. 1.Working automation deployed in the client environment
  2. 2.Decision / audit log — a reproducible record of every action
  3. 3.One-page control write-up (the defensibility note)
  4. 4.30-minute handover walkthrough

4. Timeline

1–2 weeks from kickoff, subject to environment access being available at kickoff.

5. Commercials

Fixed fee: £6,000 – £25,000 for the scope above. 50% on kickoff, 50% on delivery. Out-of-scope work is quoted separately before any is started. Prices exclude VAT.

6. Client responsibilities

  • A named point of contact and timely access to the target system / environment
  • Sample data (or a representative sandbox) at kickoff
  • One decision-maker available for the scoping and handover sessions

7. Assumptions & change control

Scope is fixed; material changes are handled by a short written change note with any fee or timeline impact agreed before work continues.

8. Data & confidentiality

We handle client data under a confidentiality obligation and process it only to deliver this engagement. Data-protection specifics (controller / processor roles, retention) are confirmed in the engagement terms and align with our Privacy Notice.

9. Acceptance

Deliverables are accepted on completion of the handover walkthrough, or 5 working days after delivery if no issues are raised.

For Virticus Advisory

Name / title

Signature / date

For the Client

Name / title

Signature / date

Questions or ready to start? Contact hello@virticus.com.