No-Cost Scoping Retainer

Pre-engagement scoping: $0 fees, no obligation, NDA path, access boundaries, and a draft review plan before any paid work. Converts to a paid SOW only after approval.

Effective Date	the Effective Date	Client	Client
Purpose	Pre-engagement scoping for the engagement agreed during scoping	Primary contact	the primary engagement contact

This No-Cost Scoping Retainer lets a champion move legal, finance, procurement, and technical scoping in parallel before any paid work begins. No-cost scoping does not mean free consulting — it means confidentiality, access boundaries, and review planning so the engagement can be defined cleanly. This is a business summary; the signer-ready draft is confirmed during scoping and is reviewable by counsel.

1. No fees, no obligation

$0 fees. This scoping phase carries no charge.
No obligation to buy. Entering this retainer does not commit either party to a paid engagement.
Either party may stop the scoping phase at any time, for any reason, in writing.

2. Confidentiality

Confidentiality is governed by the parties' Mutual NDA (executed alongside or before this retainer).
Information exchanged during scoping is used solely to plan a potential engagement.

3. What this phase covers

Preliminary scope planning only: target system, review window, deliverables, access boundaries, and a draft review plan.
Vendor / procurement packet and an internal approval memo to help the champion get to yes internally.

4. What this phase does not authorize

No production testing unless separately authorized in a signed Statement of Work and, where applicable, Rules of Engagement.
No adversarial testing of any kind unless separately authorized in a signed AI Red Team Rules of Engagement addendum.
No access to production credentials, secrets, or regulated/customer personal data.

5. Safe intake

Do not submit secrets, credentials, or regulated/customer personal data through public forms or unencrypted channels.
If customer or personal data may enter scope, a DPA Lite is executed before any such data is shared.
Provider applies minimum-necessary access and the Evidence Handling Policy to anything shared during scoping.

6. Conversion to paid work

This retainer converts to paid work only after the Client approves a scoped Statement of Work or private offer.
Typical next step: the aisecurity.llc AI Launch Security Review SOW — first findings in 5 business days, launch-ready review in 5–10 business days.

7. Term

This retainer is effective from the Effective Date and continues until a Statement of Work is executed or either party ends the scoping phase in writing.

Provider: aisecurity.llc · Authorized signatory: David Wolf · hello@aisecurity.llc Client: Client · Authorized signatory: ________________________