Resources
Real companies, real compliance outcomes
A provider, a deployer and an agency — three different relationships to AI regulation, three different reasons Unorma became part of how they work.
- 5×
- Faster security reviews — Shoparn
- +48pts
- EU AI Act readiness gained — Urbanesse
- 8
- Clients per consultant, one dashboard — AIORA
- 3
- Roles proven — Provider, Deployer, Agency
Shoparn
AI virtual try-on for furniture e-commerce
3 wks → 4 days
Security review turnaround
2
Enterprise deals closed weeks faster
Framework
EU AI Act
The challenge
Shoparn's browser-based widget lets shoppers see furniture in their own homes before buying — a feature enterprise retailers love, until their security team asks for an AI compliance questionnaire. Every deal stalled at the same point: nobody at Shoparn could say with confidence what EU AI Act classification applied to an AI-generated visualisation tool, so each prospect got a different, improvised answer.
The solution
Shoparn registered their try-on engine in AI Inventory, and the classification wizard placed it as a limited-risk system under the EU AI Act — triggering transparency obligations rather than the full high-risk regime. AI Documents generated a Model Card and a Transparency Notice from the system's real data in minutes, and the team activated a Public Trust Profile so procurement teams could self-serve the answer instead of opening a ticket.
The results
Security reviews that used to take three weeks of back-and-forth now close in about four days — most of it just the prospect's own internal sign-off. Two enterprise retail deals that were stuck on security review closed weeks earlier than the sales team had forecast, and procurement contacts now check the trust profile link directly instead of emailing Shoparn's team.
“We build AI try-on technology, so every enterprise deal now starts with a compliance questionnaire. Unorma classified our system under the EU AI Act in an afternoon, and the public trust profile answers procurement teams before they even ask. Our last two retail deals closed weeks faster.”
AIORA Consulting
AI compliance and governance consultancy
8
Client engagements per consultant
40+
Enterprise clients across the portfolio
Framework
EU AI Act, ISO 42001, NIST AI RMF
The challenge
AIORA advises enterprise clients across Europe on AI compliance, but before Unorma each client engagement ran on its own spreadsheet and shared drive. There was no portfolio-wide view of which clients were falling behind, consultants duplicated effort building the same documents from scratch for each client, and every deliverable had to be manually reformatted to remove any trace of the tools used to produce it.
The solution
AIORA moved client work onto Unorma's Agency platform. Each client now gets a fully isolated workspace under AIORA's own branding — Level 2 white-label, so logins, emails and reports carry AIORA's identity with no visible trace of the underlying platform. The Agency Dashboard gives consultants a single portfolio view of readiness and overdue items, and a centralised Review Queue replaced the old habit of checking each client's spreadsheet individually.
The results
Where consultants previously managed three or four clients comfortably before administrative overhead took over, a single AIORA consultant now runs eight client engagements in parallel from one dashboard. Client-facing reports are generated in AIORA's own brand in one click instead of being manually reformatted, and the firm has been able to grow its client base without growing headcount at the same rate.
“As an AI compliance consultancy, Unorma is our operating platform. Each client gets an isolated workspace, our consultants work from one review queue, and the reports carry our brand. One consultant now comfortably runs eight client engagements in parallel.”
Urbanesse
City branding & civic UX for European municipalities
38% → 86%
EU AI Act readiness score
4
European cities in active deployment
Framework
EU AI Act
The challenge
Urbanesse builds citizen engagement platforms for city governments across Europe, using third-party AI to power features like automated resident query routing. Public-sector tenders increasingly ask bidders to prove responsible AI governance — but as a deployer rather than a builder of the underlying AI, Urbanesse's team wasn't sure which obligations were even theirs to meet, and their only compliance record was a spreadsheet nobody on the tender team fully trusted.
The solution
Urbanesse registered each AI-powered feature in AI Inventory, and the platform's role classification confirmed they were a deployer for each system — filtering out provider-only obligations that didn't apply to them. Gap Analysis translated the remaining EU AI Act deployer obligations into a clear, evidenced checklist, replacing the spreadsheet with a structured record the whole team could see and trust.
The results
Urbanesse's EU AI Act readiness score moved from 38% to 86% across their active civic deployments. Tender responses now cite a specific, evidenced readiness score instead of a self-assessment claim, and the compliance record is maintained continuously rather than assembled under deadline pressure before each new bid.
“We deploy AI in civic platforms for European cities, and public-sector tenders demand proof of responsible AI. The gap analysis told us exactly what a deployer needs to document — no legal jargon, just clear steps. We went from a spreadsheet nobody trusted to an audit-ready register.”
Want to be our next case study?
14-day free trial · No credit card · Full access to every feature.