Depth over volume
A limited client portfolio, with senior practitioners on the work rather than on the proposal only.
About VGrid
A specialist consultancy with a single thesis: AI must be governable
We work with a small number of organisations at a time, in depth, on the governance of artificial intelligence — supported by cybersecurity, privacy and monitoring as sustaining layers.
Who is VGrid?
VGrid is a specialist consultancy specialising in AI governance, AI security and AI compliance. It is led by Rafael Lotfi Marrocos Leite, Founder and CEO, who works as CISO and DPO for client organisations and holds the following credentials: ISO/IEC 42001 Lead Implementer, ISO/IEC 42001 Lead Auditor, ISO/IEC 27001 Lead Auditor, ISO/IEC 27701 Lead Implementer and EXIN AI Compliance Professional. Engagements are delivered in Portuguese, English and Spanish for clients in Latin America, Europe and the United States.
The VGrid ecosystem
Alongside its consulting projects, VGrid is structuring an ecosystem of partner consultants and firms. The model brings together technical support through VGrid Advisory, training and credentialing through VGrid Academy, and VGrid.ai, the AI governance platform currently in development.
How we work
Evidence-driven
Every recommendation ends in something inspectable: a control, a record, a metric or a documented decision.
Framework-anchored
ISO/IEC 42001, ISO/IEC 23894, NIST AI RMF, the EU AI Act and applicable data protection law, applied to your context.
Scope and transparency
VGrid does not issue ISO certificates. Consulting scope and any commercial relationships with technology providers are disclosed in each proposal. VGrid.ai is our own platform, currently in development.
Frequently asked questions
In which languages and regions does VGrid operate?
Engagements are delivered in Portuguese, English and Spanish, for organisations in Latin America, Europe and the United States. Regulatory work is scoped per jurisdiction, with local counsel involved where legal opinion is required.
Does VGrid resell software?
Our advisory work is independent. Where a technology partner is relevant to a client's control objectives, the relationship is disclosed and the recommendation remains grounded in the client's requirements.