Decide how AI is used. Then make it stick.
We build and run your AI governance program: clear rules, real controls inside your systems, and a record of every decision. It is managed continuously, not written once and forgotten.
A complete program, run for you.
AI inventory
A living register of every AI tool, add-on, model and agent in your business: who uses it, what data it touches, and whether it is approved.
Risk register
Each AI use is rated for data sensitivity, business impact and vendor risk, so attention goes where the exposure is.
Acceptable-use policy
Plain-language rules your staff can actually follow: which tools are approved, what data may never go in, and when to ask first.
Approval gates
High-impact AI actions such as sending to clients, moving money, deleting records or sharing files wait for a named person to approve them.
Data boundaries and access
Least-privilege access for every AI tool and agent. Client data, credentials and regulated information stay out of reach.
Audit trail
A record of what each AI did, on whose behalf, with which data, and who approved it. It is kept as evidence without anyone having to remember.
Drift and change control
The approved configuration is your baseline. New tools, changed settings and expanded permissions are caught and reviewed.
Staff training and sign-off
Short, practical training for your team, with recorded acknowledgement of the policy for your records.
AI incident response
A clear plan for when AI gets it wrong: a data leak, a bad output sent to a client, or a compromised account.
Asked often.
We are a small company. Do we really need AI governance?
If your staff use AI with client or company data, yes. The program is sized to you: a 20-person firm needs clear rules, the right controls and records, not a committee.
Will this stop my team from using AI?
No. The aim is the opposite: safe, approved tools people can use with confidence, and firm limits only where the risk is real.
Do you replace our current IT provider?
Not necessarily. We can work alongside your existing IT team or provider, or run managed IT for you as well.
What do we get at the end?
An AI inventory, an approved policy, working controls in your systems, an audit trail, and regular reporting. Everything is yours to keep.
Find out where your AI risk actually is.
Start with a briefing. We look at how your team uses AI today, where your data goes, and what your clients, insurers and regulators will ask you to show. You leave with a clear first step.