45 minutes. You leave with the gap mapped.
A gap map you own, in your own terms, covering the operations you name. You keep it whether or not you go further. Nothing in it is a proposal, and nothing in it asks you to adopt our vocabulary.
Three questions, and which of them you can answer today.
We walk your CPS 230 critical operations and mark where an agent acts today. For each of those points we name what evidence exists, and who could check it without us in the room.
Then the three questions an assessor asks: which actions ran, on whose authority, and what stopped the actions that should not have run. You leave knowing which of the three you can answer.
Nothing leaves the conversation.
Your operations are not written into a case study, a website, a repository or a pitch. NOMARK is pre-revenue with no customers to name. It will stay that way in public until a partner says otherwise in writing.
Records you hold do not depend on us existing.
One person sits on our side of the table. Your auditor builds the verifier from source and runs it on a machine you control, so a record you hold today verifies whether or not NOMARK is reachable. That is a property of the architecture rather than a promise about the company. The stage, and what a design partner gets sets out what one person means, including what the reference campaign does not prove.
On your side, bring your risk or investment operations lead and whoever owns the control library the answer would sit in. A technical person is welcome and is not required. The first pass is about where agents act, not about how the collector is deployed.
If you came for the assessment pack, say so in the note.
The questionnaire, the residency statement and the subprocessor register are drafted and pending counsel. Asking for them under a confidentiality agreement is faster than waiting, and the answer is the same either way. Drafted for counsel review. Not a contractual representation.
Start with a note, not a calendar link.
A short note describing the operation tells us more than a meeting request. Name the operation, say who would sit in, and say whether you want the assessment pack as well.
The address is written out so it can be copied without opening a mail client.
If you would rather arrive with the gap already mapped, the twelve-question worksheet covers the same ground on your own time and sends us nothing.