01 AI tool inventory
Every AI service touching your environment — sanctioned, trialled, or quietly expensed — with the business owner, the monthly cost, and the data it can reach.
Home / AI Readiness Assessment
Two weeks · Fixed fee · Deliverables are yoursThe AI Readiness Assessment
Stop guessing. In two weeks you'll know precisely what AI is running inside your business, what data it can reach, what it's costing, where you're exposed, and which two or three use cases are genuinely worth funding.
What you walk away with
Six deliverables, and you keep all of them
Even if you never hire us for another hour of work. We'd rather you have a clear picture and choose your own path than sit on a vague risk you can't describe.
02 Data exposure map
Which categories of your data leave the building, through which tool, under whose terms, stored in which region, and for how long.
03 Risk register
Findings scored against the NIST AI Risk Management Framework and prioritized by real business impact — written so a non-technical board can follow it.
04 Top three use cases
The highest-return AI opportunities in your business, each sized by implementation effort, monthly cost, and hours realistically returned per week.
05 Draft AI policy
A one-page acceptable-use policy written for your industry and headcount — specific enough to act on, short enough that people finish reading it.
06 90-day roadmap
Sequenced, costed, and assigned — plus a live one-hour readout with your leadership team where we defend every recommendation.
The two weeks
What actually happens, day by day
Total time required from your team: roughly three hours. We do the rest.
Kickoff & scoping
A 60-minute session with your leadership: what you're trying to achieve with AI, what you're obligated to protect, and who touches what. We agree on scope and access in this call.
Technical discovery
Read-only review of your identity provider, tenant configuration, sanctioned app list, endpoint telemetry, and expense records to surface AI tools in use. No agents installed, no production changes.
Team interviews
Three or four 20-minute conversations with the people doing the work. This is where the real use cases come from — and where we find the tools no system logged.
Analysis & vendor review
We score findings against the NIST AI RMF, review each vendor's training, retention, and sub-processor terms, and model the cost and return of candidate use cases.
Readout & handover
A one-hour presentation to your leadership team, all six deliverables handed over in editable form, and honest answers about what we'd do first if it were our business.
This is a good fit if…
- You have 20–500 employees and no dedicated AI or compliance staff
- You suspect people are using AI tools you haven't approved
- A client, auditor, or insurer has started asking about your AI controls
- You're paying for AI licences and can't prove they're worth it
- You want to move faster on AI but not recklessly
Probably not, if…
- You already have a mature AI governance program and a named owner for it
- You're building and training your own foundation models
- You want a strategy deck rather than changes to your environment
- You want someone to rubber-stamp a decision that's already made
If any of these are you, say so on the call and we'll tell you honestly. We'd rather refer you out than sell you an assessment you don't need.
Request an assessment
Tell us a little and we'll come back with a quote
Fixed fee, scoped to your headcount and systems — no hourly surprises. We'll reply within one business day, usually the same day.
Would rather just talk? Grab a 30-minute slot on the calendar instead.