How we work
We are a domain firm. We assess, advise and design — and we say plainly what we do not do.
- 01
Assessment
Start with the AI Readiness Assessment online.
- 02
Scope and fee
Agreed in writing before any work begins.
- 03
Read-only review
Three weeks of exports, configuration and interviews.
- 04
Deliverable
Findings and sequenced remediation, each with a named owner.
Domain-led, not delivery-led
X2A provides assessment, architecture and advisory in two domains: AI governance and identity governance. Where implementation is required, we work with named delivery partners and specialist engineers, introduced openly and contracted transparently.
This keeps our judgement independent of what we would otherwise be selling. The assessment does not conclude with our own product.
What we do not do
We do not provide a managed service. We do not run a security operations centre, we do not monitor your estate around the clock, and we do not hold an incident response retainer.
If your requirement is continuous operation, we will say so early and, where useful, point you to firms that do that work.
The engagement model
- 01
Scoping conversation
One or two conversations to establish the estate, the regulatory pressure you are under, and which question the assessment must answer. No charge.
- 02
Fixed scope, fixed fee
Scope, duration, evidence requirements and fee are agreed in writing before work begins. Three weeks is the standard duration for both assessments.
- 03
Read-only fieldwork
We work from configuration exports, documentation and interviews. Nothing is installed, no configuration is changed, and no production path is touched.
- 04
Findings and sequence
A document written for a risk committee: findings, ownership gaps, and remediation sequenced by exposure, each item with a named owner.
- 05
Advisory or partner delivery
We can advise through remediation, or introduce delivery partners. Either way the decision, and the contract, remain yours.
The first engagement is an assessment. It is intended to be small enough to say yes to and specific enough to act on.
Start with an assessment.