Where AI pays off, and the rules it works under
We score the tasks where AI could help, and advise whether to build or buy for each one. Then we set the rules for access, approvals, logs and data handling, and train your people to work within them.
For whomFor senior leaders, technology leads and risk and compliance teams who must decide where AI fits and show that its rules are followed.
- Where AI pays off
- Build or buy
- Rules for access and approvals
- Your people trained to use it
You can stop after any stage
We set your rules up as controls inside the tools your people use
Strategy decides where AI is worth using. Governance sets the rules that let you stand behind that use. The rules cover who may use which tools and data, which actions wait for a person, and what is logged. We design them around the laws that apply to you, for example the GDPR for personal data or the EU AI Act. Your lawyers interpret the law, and we build the controls that show it is followed. We issue no certificates.
Every possible use is scored before anything is bought
Where AI pays off
We score every possible use for value, effort and risk. Each one gets a written recommendation, including the ones we advise against.
Build or buy
For each use worth doing, we compare the products you could buy with building your own. The reasons for the choice are written down.
Set the rules
Who may use which tools and data, which actions wait for a person, what is logged and for how long, and how personal data is handled.
Put the rules in place
We set the rules up inside the tools themselves as access by role, approval points and activity logs.
Train your people
Briefings for leaders and practical sessions for teams on using AI within the rules you have set.
You decide which actions wait for a person to approve. We build that approval into the tools.
Example
A request to summarise customer emails becomes a rule and a control
A hypothetical case, to show how the work runs.
- The support team asks to use AI to summarise customer emails in the shared mailbox.
- We score the use. The value is high, and the main risk is the personal data in the emails.
- A product you already license can do the job, so the advice is to buy. The reasons are written down.
- The rule lets support staff use it on that mailbox only. A person sends every reply drafted with it.
- We set the rule up as a role in the product’s admin settings and switch on its activity log for your compliance lead.
The rules arrive as working controls
How we work together
A fixed piece of work, with the training agreed as part of it. You can stop after the first findings and keep everything produced up to that point.
- A scored list of uses, including what not to build
- A build or buy recommendation for each, with the reasons
- Written rules for access, approvals, logs and data handling
- Those rules set up as controls in the tools you use
- Training for leaders and teams, with the materials to keep
Questions buyers ask
What if the organisation is not ready for AI?
We say so and set out what to fix first, usually the data or a process. You keep that result whether or not you continue with us.
Does this replace our legal counsel?
No. We work alongside your lawyers. They interpret the law. We put in place the controls, the logs and the documents that show it is being followed.
Do you certify our AI systems?
No. We do not issue certificates. Laws and frameworks such as the GDPR or the EU AI Act are examples of the rules we design controls around, and your auditors decide whether they are met.
Tell us where AI could help, and we will score it
Name the systems you use and the data you hold. Our first reply names the two or three uses we would score first, and the rules they would need.
Start a project