Practical AI governance for growing businesses
You don’t need a 200-page framework. You need clear rules your team will follow, answers for your customers, and confidence that AI is helping your business, not exposing it. Every engagement is scoped to your business, and every one is led by a senior expert.
Engagements at a glance
| Engagement | Best for | Typical timeframe |
|---|---|---|
| AI Policy Starter | Teams using AI tools with no rules yet | 2–3 weeks |
| AI & Data Risk Check | Owners who want to know where they stand | 3–4 weeks |
| Customer & Investor Readiness | A deal, contract or funding round is on the line | 1–3 weeks |
| AI Product Compliance Review | Businesses building AI into what they sell | 3–5 weeks |
| Fractional AI Governance Advisor | Ongoing senior support without a full-time hire | Monthly |
AI Policy Starter
Give your team clear rules for using AI, fast.
Most small businesses start here. Your people are already using AI tools; this engagement makes sure they use them well.
What you get:
- An inventory of the AI tools your team uses, including features built into software you already pay for
- A plain-English AI acceptable use policy, tailored to your business
- A simple approved-tools list and a process for requesting new ones
- A 60-minute team training session (live or recorded)
AI & Data Risk Check
Know where you stand, and what to fix first.
A focused review of how your business collects, uses and shares data, including through AI. You’ll come away with a clear picture of the privacy and AI regulations most relevant to your business today, and a practical plan for addressing them.
What you get:
- A review of your key data flows, AI uses and vendors
- A summary of the regulations most relevant to your business at the time of the review, such as US state privacy laws, GDPR, the EU AI Act and industry-specific rules
- A risk-ranked findings report in plain language
- A prioritized 90-day action plan
A note on the evolving regulatory landscape: data and AI regulations change constantly, with new laws, amendments, court decisions and regulatory guidance emerging all the time. Our review reflects the regulatory landscape, and your business, as they stand when the assessment is completed. It is not legal advice, and its conclusions should be revisited as your business and the rules evolve. For ongoing monitoring, see our Fractional AI Governance Advisor service.
Customer & Investor Readiness
Don’t let a questionnaire stall a deal.
Larger customers, partners, insurers and investors increasingly ask how you handle AI and data. We help you answer clearly, credibly and quickly.
What you get:
- Support completing AI, privacy and data security questionnaires
- Review of data protection terms in customer and vendor contracts, working alongside your attorney
- A reusable “trust pack”: standard answers and supporting documents for future requests
- Due diligence preparation support for funding rounds or acquisitions
AI Product Compliance Review
Building AI into your product or service? Know your obligations before you launch.
For businesses that develop or offer AI-powered products, especially those selling into Europe or regulated industries.
What you get:
- An EU AI Act applicability and risk classification assessment
- A review against widely used frameworks such as the NIST AI Risk Management Framework or ISO/IEC 42001
- Documentation and transparency recommendations for your AI features
- A compliance roadmap sized to your stage and resources
Fractional AI Governance Advisor
A senior expert on call, without adding to your headcount.
Ongoing, part-time support for businesses that want someone to own AI and data governance as they grow.
What you get:
- A set number of advisory hours each month
- Review of new AI tools and vendors before you adopt them
- Policy updates as your business and the rules change
- A short quarterly briefing for you or your leadership team on what’s changed and what it means for you
How we work with you
- Clear scope. You’ll know exactly what you’re getting, and when, before we start.
- Remote by default. We work with clients anywhere, with in-person meetings when they make sense.
- Alongside your advisors. We’re not a law firm or a software vendor. We work alongside your attorney, IT provider and other partners to turn requirements into practical steps.
Enterprise and advisory engagements
We also advise larger organizations on enterprise data governance, privacy program design and AI governance frameworks, drawing on our founder’s 25+ years leading these programs at IBM. If that’s you, let’s talk about a custom engagement.
Not sure which engagement fits?
Most clients aren’t, at first. Book a complimentary 30-minute call and we’ll point you to the right starting point, even if that means telling you what you can safely do on your own.