Services

Tier 1: AI Compliance Health Check

Who it’s for:

Organisations at the start of their AI journey that want clarity on current AI use, risk exposure, and readiness before scaling. This review uncovers how AI is being used across teams, highlights hidden risks, and identifies the first steps toward safe, compliant adoption.

Ideal for:

• Organisations unsure how AI is currently being used internally
• Teams wanting a first-step compliance check before introducing new AI tools or policies
• Leaders who want a clear picture of risk exposure before investing in AI projects
• Businesses looking for a quick win and a roadmap for next steps

Why do I need this?

AI is probably already being used in your organisation, often without approval or oversight. Staff may be experimenting with generative AI tools like ChatGPT, AI assistants or note-takers, or even connecting AI agents to company accounts without understanding the risks.

This can expose your business to:

• Privacy or data protection breaches
• Biased or discriminatory outcomes
• Reputational damage if errors surface publicly
• Non-compliance with evolving AI regulations

The Compliance Health Check gives you:

• Clarity on how AI is really being used in your organisation
• A risk snapshot aligned to current and emerging regulations
• Confidence to decide your next steps before AI adoption scales further

What’s included:

✅AI Usage Audit

• 60-minute kick-off meeting with 2–4 key people to identify known tools and use cases.
• Staff survey to capture current AI usage across teams.

✅Basic AI Tool Risk Scan

• Quick review to spot tools that may carry higher privacy, bias, or security risks.
• Flags potential high-risk use cases (e.g. personal data processing, decision-making in HR or client services).

✅AI Usage & Risk Report

• Summary of findings, aligned to applicable regulatory best practice.
• Red flag detection:
  • Unmonitored AI tool use
  • Bias risks (e.g. age, gender)
  • Lack of AI tool assessment processes
• Assessment of staff confidence, knowledge, interest, and training needs.

✅Final Recommendations Meeting - 60-minute live session to present findings, discuss recommendations, and outline next steps.

Deliverables:

6 - 8 weeks from project start

• Week 1: Kick-off meeting + survey launched.
• Week 2–3: Survey collection period and follow-up questions.
• Week 4–5: Analysis, report preparation, and recommendations.
• Week 6: Final presentation meeting.

Next step:

Book a free discovery call to confirm scope, sector requirements, and project start date.

Tier 2: Policy & Training Package

Who it’s for:

Organisations that need clear, tailored AI usage rules and staff upskilling before expanding AI adoption. This package builds on Tier 1 by delivering a formal internal AI policy, practical tools for assessing AI risks, and targeted training so staff know exactly how to use AI safely and in line with regulatory best practice.

Ideal for:

• Organisations ready to move from “informal use” to a documented, governed AI approach
• Teams needing practical policies that are actually understood and followed by staff
• Leaders wanting clear procurement and vendor assessment processes
• Organisations preparing for upcoming regulatory changes or client scrutiny

Why do I need this?

Even if you know how AI is currently being used, risks remain if there are no clear rules or processes. Without a policy, staff may use AI tools inconsistently, overlook privacy or bias issues, or procure risky vendors without checks. This can expose the organisation to compliance breaches, inefficiencies, or reputational harm.

The Policy & Training Package gives you:

• A tailored AI usage policy aligned to your organisation’s context and regulations
• Clear checklists and registers so you know which tools are in use and how they’ve been vetted
• Staff training to build confidence and consistency in safe AI use
• Guidance on procurement and vendor assessment to prevent risky contracts

What’s included:

✅ Everything in Tier 1, plus:

✅ Internal AI Usage Policy – tailored to your organisation’s context and sector requirements

✅Staff Training & Upskilling - One live or recorded team training session (up to 60 minutes).

✅ AI Tool Use & Risk Checklist – aligned to international standards like the EU AI Act and GDPR (where relevant), including:

• “How to assess if an AI tool is safe to use” guidance
• Minimum vendor requirements for privacy, transparency, and security

✅AI Use Register Template - Simple, adaptable register to track what AI tools are in use, who uses them, and for what purpose.

✅ Strategic procurement guidance – how to set guardrails for buying or renewing AI tools

• Guidance on low-risk alternatives.
• Recommended minimum vendor standards for privacy, transparency, and compliance.
• Key questions to ask before contracting with AI vendors.
• Contractual red flag spotting (e.g. data ownership, liability clauses).

Deliverables:

6 - 8 weeks from completion of Tier 1.

• Week 1: Kick-off + review of Tier 1 findings.
• Week 2–3: Drafting and refining internal AI policy. 
• Week 4: Development of AI risk checklist, AI use register, and procurement guardrails.
• Week 5: Draft policy handover and 30 minute revision session.
• Week 6: Final policy handover and Q&A (live or recorded).
• Week 7-8: Team training session delivered. 

Next step:

Book a free discovery call to discuss your policy and training needs, and confirm scope and sector requirements.

Tier 3: Full AI Governance Framework

Who it’s for:

Organisations ready to embed long-term AI oversight, governance, and risk management at scale. This package is designed for enterprises where AI use is expanding quickly and leadership needs confidence that adoption is ethical, compliant, and strategically aligned.

Ideal for:

• Regulated or privacy-sensitive organisations scaling AI across multiple departments
• Leaders wanting formal governance that stands up to regulator, client, or partner scrutiny
• Organisations introducing high-risk AI tools or functions under evolving regulations
• Enterprises seeking a governance model that is proactive, not reactive

Why do I need this?

As AI becomes embedded in daily operations, oversight can no longer be informal. Without a governance structure, new tools may be introduced without proper vetting, bias or privacy issues may go unnoticed, and leadership risks being blindsided by compliance failures or reputational damage.

The Full AI Governance Framework gives you:

• A practical system for reviewing, approving, and monitoring AI tools across the organisation
• A permanent oversight body (AI Review Board) with clear responsibilities and authority
• Risk monitoring processes that keep leadership informed and compliant
• Training for both executives and staff, so governance becomes part of everyday culture

What’s included:

✅ Everything in Tier 2, plus:

✅ AI Governance Framework – A practical “playbook” that makes sure AI oversight is built into everyday operations. Aligned with GDPR, the EU AI Act, and sector-specific rules, it addresses key risks like bias, privacy, and transparency. Designed to make approval and oversight part of everyday operations.

• Tool Onboarding & Change Protocol – a clear process for vetting and approving new AI tools before use
• Custom Decision Trees – easy-to-use flowcharts so staff know exactly when to approve, escalate, or reject new tools

✅ Permanent AI Oversight Body – set up an internal AI Review Board with the right people, mandate, and authority to manage AI risk at scale.

• Draft Terms of Reference – clearly defining responsibilities, meeting schedules, and decision-making power
• Escalation Pathways – step-by-step procedures for responding to high-risk incidents, bias detection, or system failures
• Risk Monitoring Templates – to log and track incidents, tool changes, and review outcomes

✅ Continuous Risk Monitoring & Reporting – embed a routine review process to catch issues early, maintain compliance, and support leadership decision-making.

✅ Leadership & Staff Enablement – ensure everyone knows their role in AI governance.

• C-Suite Briefing – a 60-minute session on strategic and regulatory risks tailored to your sector
• Dual Training Streams – two 60-minute sessions: one for leadership, one for staff, covering their specific responsibilities in oversight and safe use

Deliverables:

12 - 14 weeks from completion of tier 2

• Weeks 1–2: Project kick-off, review of existing AI governance, and confirmation of scope and sector-specific requirements.
• Weeks 3–5: Draft and refine the Enterprise AI Governance Framework, including Terms of Reference, escalation pathways, and monitoring protocols.
• Weeks 6–7: Support for AI Review Board setup and delivery of risk monitoring templates.
• Weeks 8–9: Development of tool onboarding/change protocols and custom decision trees for tool approval and escalation.
• Weeks 10: Final handover of governance framework, templates, and decision tools.
• Week 11: Staff and leadership training sessions
• Week 12: Delivery of C-suite strategic briefing and leadership training sessions. 

Next step:

Book a free discovery call to confirm scope and sector requirements.