AI Compliance Readiness
Your AI is already regulated. Are you ready?
If your business uses AI to decide about people, screening resumes, approving credit, evaluating customers, Mexico's LFPDPPP already requires notice of automated decisions, a right to object, and human review. Fines run up to ~1.5M UMA. HEA is the first specialized AI compliance consultancy in Mexico.
The risk
Most companies don't know they're already exposed.
No inventory of AI systems in use
Shadow AI runs in HR, sales, and support without anyone tracking what it decides or on whose data.
No risk classification
Without a EU AI Act + LFPDPPP risk matrix, you can't tell which systems need a DPIA and which don't.
No human review protocol
Automated decisions about people need a documented right to object and human oversight. Most companies have neither.
How it works
A clear path from exposure to compliance.
Diagnostic
We inventory every AI system in use, including shadow AI, and classify risk against the EU AI Act and LFPDPPP.
Compliance Pack
DPIAs for your highest-risk systems, governance policies, updated privacy notices, and an incident and human-review protocol.
Guardian retainer
Continuous monitoring, regulatory watch, audit simulations, and DPIAs for every new system you deploy.
Pricing
Three tiers, one natural path.
Tier 1 is 100% credited toward Tier 2 if you sign within 30 days.
Diagnóstico IA-Ready
- Inventario completo de sistemas IA (incluye shadow AI)
- Clasificación de riesgo (EU AI Act + LFPDPPP)
- Gap analysis
- Roadmap 30-60-90 días
Compliance Pack
- Todo lo de Diagnóstico
- 3 DPIAs de sistemas de alto riesgo
- Políticas de gobernanza
- Avisos de privacidad actualizados
- Protocolo de revisión humana e incidentes
- Capacitación al equipo
Guardián IA
- Monitoreo continuo
- Watch regulatorio
- Simulacros de auditoría
- DPIAs de sistemas nuevos
Be first on the registry, not the fine list.
Book a call and we'll tell you exactly where you stand before anyone else asks.
Talk to HEA