Recommended Package
Shadow-AI Risk
Governance (AA-03) + Secure Shadow-AI Amnesty (AA-09). Strong entry point for firms that already have uncontrolled AI use.
Directional starting estimate. Final scope set on the intro call. Win Either Way guarantee applies to agreed outcomes.
What's included
- AA-03AI Governance & Safe Adoption Framework
Someone in accounting is already pasting client numbers into a public chatbot to save an hour, and nobody in IT knows it's happening. Multiply that across a firm of 50 or more people and the exposure adds up fast, while the formal AI project sits stalled because legal is still waiting on rules nobody's written yet.
- AA-09Secure Shadow-AI Amnesty & Migration
People are already using AI tools the firm never approved, because the approved option is slower or doesn't exist yet. Cracking down on it just teaches people to hide it better, and pretending it isn't happening doesn't make the exposure go away either. The firm ends up carrying the risk without getting any of the upside from what people have already figured out works.
Illustrative timeline
Typical 4–8 weeksTypical 4–8 wksDirectional sequence. Calendar locked after diagnostic.
- FrameRulesPolicy + tools
- OpenDiscloseNo penalty
- InventoryPatternsRisk + value
- MigrateApprovedRisk down