Solutions
AI Policy & Governance
For leadership teams whose people already use AI, with or without permission. We help you set clear rules people follow, and keep them current as tools and requests change.
You're likely a fit if…
People use AI at work, and you don't know which tools.
Or what data goes into them. The first time you'll hear about it may be a problem.
Tool requests land on your desk with no process.
Departments want to buy AI products. Nobody owns the yes or no, so decisions stall or happen without review.
Your policy is a document or a ban.
Either nobody reads it, or it forbids everything and people work around it on personal accounts.
The questionnaires have started.
Customers, insurers or your board now ask how you control AI, and the answers are improvised.
What we build
An inventory of current use
Which AI tools your people use, for what work and with what data, from interviews and what IT can already see.
AI Security: An inventory of current useA use policy people can follow
Approved tools, what data can go where, what needs sign-off. Written for employees, reviewed by your counsel.
A decision process for new tools and uses
A short intake, risk tiers and named approvers, so requests get a timely answer instead of a queue.
Vendor and tool evaluation
The questions that matter about data use, retention and security, and help with the real decisions in front of you.
Learn more: Vendor and tool evaluationAn AI steering group
Set up and chaired at first, then handed to an internal leader once it runs on its own.
Learn more: An AI steering group
Scope
Included, and not
Policy, decision process, inventory and rollout materials, with ongoing upkeep through the advisory retainer. We work with your counsel, not instead of them: this isn't legal advice or a certification.
What we need from you
An executive sponsor, contacts in IT or security, HR and legal, and your current policies and approved-software list.
What drives cost
How many departments are in scope, how many tools are already in use, how regulated your industry is, and whether you want a one-time setup or ongoing advisory. Assessments are fixed-fee. Builds are scoped and priced after the assessment. Advisory is a monthly retainer.
How we'd start
Start with an Assessment. Leadership and role interviews show where AI is already in use and where the risk sits.
Draft the policy and decision process with IT, HR and legal at the table.
Roll it out: the approved-tools list, the request intake, and manager training led by our partner, who leads AI adoption and change management.
Keep it current through monthly advisory sessions as new tools and requests arrive.
Hand the steering group to an internal owner when it's ready to run without us.
Common questions
Do we need a policy before people use AI?
You need basic rules before company data goes into AI tools: which tools are approved and what data is off-limits. A short first version now beats a complete one later.
Why not just ban AI tools?
A ban often doesn't stop use. It tends to move it to personal accounts, where you can't see what data goes in, and it stalls AI adoption among the people who follow the rules. Approved tools with clear limits give you more control.
What does governance look like after the policy is written?
It's part of the Fractional AI Advisor retainer: monthly sessions to review requests, evaluate vendors and update the rules, with a direct line between sessions.
How long does it take?
A first working policy and decision process is usually S-sized (1–3 weeks) when it follows an Assessment. Regulated industries and companies with many departments take longer.
Industries where this applies
Let's find where AI pays off in your business.
Thirty minutes with Daniel. No pitch deck: you talk about your business, I tell you honestly where AI fits and where it doesn't.