RIXA Advisory · Regulation, converted into control. · Find evidence gaps before a client, auditor or regulator does
If someone asks for proof tomorrow, can your team produce it?
RIXA turns AI Act, DORA and internal-control requirements into one traceable management view: what applies, what evidence exists, what is missing, who owns it and what happens next.
Not sure which package fits? You do not need to choose one. Start with the issue; the review routes it to the smallest useful scope.
Management blind spot
What can you demonstrate without starting a search?
Does this sound familiar?
If any of these are true, the problem is probably not a lack of documents
Most organisations already have policies, contracts, controls and spreadsheets. The gap appears when you need to show, quickly and defensibly, what applies, what was reviewed, what is missing, who owns it and what happens next.
The RIXA response
Turn regulatory exposure into a controlled action plan
RIXA does not begin with a generic policy document. It begins with applicability, source evidence and the management decision that must be supported.
Establish scope and applicability
Define the review question, relevant regulation, risk area, entities, providers, controls and decision boundary.
Map evidence line by line
Connect source rows, contracts, policies, control records and retained evidence to the review criteria.
Issue precise findings and actions
Separate confirmed gaps from assumptions, assign owners and targets, and build evidence requests and remediation steps.
Prepare management for external questions
Deliver a management brief, source-aware working files and a 30 / 60 / 90 action plan.
Proof before purchase
See the structure management will receive
A fictional sample shows how RIXA connects source rows to findings, regulatory references, evidence requests, owners and a practical action plan.
Defined responses
Choose the response that matches the management problem
Prices are starting points for a defined initial scope. The final fee is confirmed after the initial review based on evidence volume, complexity and timing.
AI Governance Quick Scan
Clarify priority AI governance and AI Act risk, ownership and evidence gaps.
DORA / Vendor Evidence Pack
Structure ICT third-party, contract, continuity, exit, evidence and remediation questions.
Full RIXA Evidence Pack
Connect AI Act, vendor, controls and management evidence in one integrated review.
Founder-led
Founder-led, evidence-first work
RIXA was created in Brussels by Carlos Ortiz, with 15+ years across finance operations, audit and controls. The method makes obligations and exposure visible, connects conclusions to source evidence and leaves management with decisions it can execute.
“You cannot govern what you cannot see, and you cannot defend what you cannot prove. — Carlos Ortiz, Founder”
Initial review
Start with the problem, not the package
You do not need to know which package to choose. Select the type of problem, the timing and what management needs to be able to demonstrate. RIXA will propose the smallest useful scope.
About 2 minutes · No document upload · “Not sure yet” is a valid answer.
We use these details only to review and respond to your request. See the Privacy Notice.
carlos@rixadvisory.com
RIXA provides human-reviewed evidence-readiness support. It does not provide legal advice, statutory audit assurance, certification or a compliance guarantee. Findings and applicability assumptions require client and human reviewer validation. Client-identifiable or vendor-identifiable data can be anonymised where appropriate.
RIXA Advisory — Professional activity declared through Smart / Productions Associées — VAT: BE 0896.755.397