White Label GRC

Launching a Compliance Practice on White Label GRC Software: A Playbook

A concrete first-90-days playbook for launching a new AI compliance consulting practice on white label GRC software, from setup to first paying clients.

Jasper Claes

May 7, 2026 · 7 min read

White Label GRC

Launching an AI compliance practice on white label software has a real order of operations — brand setup before client work, one pilot client before a full package, and marketing that starts well before day 90. Here's the concrete first-90-days plan.

TL;DR

The first 30 days should produce a working brand setup and one signed pilot client, not a perfect service catalog.
Days 31-60 turn the pilot engagement into a repeatable, packaged service offering with defined tiers.
Days 61-90 focus on building a real pipeline — case study content, outreach, and referral requests from the pilot client.
Don't wait for the brand and methodology to be perfect before taking the first client — a pilot engagement is how you actually learn what needs fixing.
By day 90, success looks like a documented playbook, at least one paying client beyond the pilot, and a pipeline of qualified leads.

Three Overlapping Phases

Three overlapping phases — setup doesn't have to finish before you start selling.

Days 1-30: Setup and First Client

Set up branding — logo, domain, colors — on the white label platform
Configure the frameworks relevant to your target market (e.g. EU AI Act, ISO 42001, NIST AI RMF)
Sign one pilot client, ideally an existing relationship, at a discounted or pilot rate
Run the pilot engagement using the platform's native workflows, documenting every step

Days 31-60: Package and Methodology

Deliverable	Purpose
Standard service tiers (e.g. Foundation/Growth/Enterprise)	Makes future sales conversations repeatable
Documented delivery playbook from the pilot	Turns tribal knowledge into a process new hires can follow
Pricing based on pilot delivery time	Reflects real effort instead of guesswork

Days 61-90: Marketing and Pipeline

Turn the pilot engagement into a case study, with the client's permission
Reach out to warm contacts and referral sources with the packaged service offering
Ask the pilot client for a specific referral, not just general goodwill
Track pipeline in a simple CRM, even a basic spreadsheet, from day one

Don't Wait for the Methodology to Be Perfect

The pilot engagement is how you discover what your methodology actually needs — not a step to skip until the packaging is polished. Firms that delay the first client until everything feels ready usually delay indefinitely.

What Success Looks Like at Day 90

A documented delivery playbook based on real experience, at least one paying client beyond the pilot, and a pipeline of qualified leads generated from the pilot's case study and referrals — not a perfect brand with zero clients.

Primary Sources

EUR-Lex — Regulation (EU) 2024/1689
ISO — ISO/IEC 42001:2023

Pricing the Pilot Engagement

A common approach is pricing the pilot at 50-70% of what the eventual standard-tier price will be, explicitly framed to the client as a founding-client rate in exchange for feedback and a case study. This keeps the engagement commercially real (not free work, which undervalues it) while still being an easy yes for a client willing to be first.

Mistakes That Slow Down a Launch

Spending the first 30 days on branding polish instead of signing the pilot client
Pricing the pilot so low it signals the service isn't worth paying for
Waiting until day 90 to start any marketing or outreach instead of starting in parallel with delivery

What to Deliberately Skip in the First 90 Days

A polished website — a simple one-pager with the pilot case study is enough at this stage
Hiring additional consultants before the pilot proves the delivery methodology
Building custom integrations or automations beyond what the platform already provides out of the box

Where Unorma Fits

Built for this exact launch sequence

Unorma’s Agency plan supports white-labeled setup fast enough to sign a pilot client in the first 30 days. Read the foundational white label GRC guide and how consultancies scale past the first few clients for what comes after day 90.

Frequently asked questions

Should we perfect our service packaging before taking a client?

No — sign a pilot client early, even at a discounted rate, and use that engagement to discover what your packaging and methodology actually need.

What should the first 30 days actually produce?

A working white-label brand setup and one signed pilot client — not a polished service catalog with zero client experience behind it.

How do we build a pipeline without an existing client base?

Turn the pilot engagement into a case study and directly ask that client for a specific referral — this is usually more effective than broad, undirected outreach at this stage.

What does a successful 90-day launch actually look like?

A documented delivery playbook based on real pilot experience, at least one paying client beyond the pilot, and a pipeline of qualified leads — not a perfect brand with no client traction.

How should we price the first pilot client?

Around 50-70% of the eventual standard-tier price, explicitly framed as a founding-client rate in exchange for feedback and a case study — real enough to value the work, discounted enough to be an easy yes.

What's the most common mistake that slows down a launch?

Spending the first 30 days polishing branding instead of signing the pilot client, or waiting until day 90 to start any marketing instead of running it in parallel with delivery.

What should we deliberately not build in the first 90 days?

A polished website, additional hires before the pilot proves the delivery methodology, or custom integrations beyond what the platform already provides out of the box.

Do we need a signed contract template before the pilot, or can we start informally?

Have at least a simple written agreement in place before the pilot begins — covering scope, pricing and data handling — even if it's lighter than the standard contract you'll formalize after the first client.

Key terms in this article

About the author

Jasper Claes

Compliance Manager & AI Governance Consultant

Compliance Manager and consultant specializing in AI governance for high-scale technology companies operating in regulated markets.

View full profile

Keep reading