AI Compliance
Your team is already using AI tools. The question is whether they are doing it safely, consistently, and in a way you could explain to a customer, an insurer or the ICO. We help small businesses put sensible AI policies, security and training in place, without the enterprise price tag.
Why it matters
It rarely goes wrong on purpose. Someone pastes a customer's details into a free chatbot to tidy up an email. A confident, wrong answer goes out to a client unchecked. Three people use three different tools and nobody knows which one holds what. When a customer asks how you handle their data, there is no good answer.
You do not need a forty-page policy to fix this. You need a short set of rules people will actually follow, the right settings on the tools you already pay for, and a few hours of training so everyone works the same way. That is what we provide, written for your trade and your team rather than copied from a template.
We are builders first. We use these tools every day to make dashboards, automations and websites for businesses like yours, so we know where they are brilliant, where they quietly make things up, and how to set them up so they help without exposing you.
What we offer
Most businesses start with the policy and the training. Some need the security review first. All four together give you a complete, defensible position in a matter of weeks.
Short, plain, and actually followed.
A policy written for your business: which tools are approved, what information may and may not go into them, when a human must check the output, how AI-assisted work is labelled, and who to ask when unsure. It comes with a one-page version for the noticeboard and the group chat.
Know where your data goes.
We look at how AI tools touch customer and staff data: accounts and access, what is stored where and for how long, whether the vendor trains on your inputs, data residency, and how it all lines up with UK GDPR and the ICO's guidance on AI. You get a prioritised fix list. Most fixes are settings, not spending.
The practical habits, written down.
An approved-tools list, a prompt library for the jobs your team does every week, review checklists for anything customer-facing, and simple record keeping so you can show what was AI-assisted and who signed it off. Kept short enough that people actually open it.
Everyone leaves with the same rules.
Half-day or full-day sessions, at your premises or virtually, tailored to your industry. We cover safe use, getting reliable results, spotting confident errors, protecting customer data, and recognising AI-driven phishing and deepfake scams. Hands-on, with real examples from your own work.
How an engagement runs
We talk to you and a few of the team about who uses what, where customer data flows, and what worries you. It can run alongside a Discovery Day or on its own, on site or over a call.
We draft, you review, we revise. Plain English throughout, with your approved tools, your data rules and your review points. You sign it off; it is your policy, not ours.
A session for the whole team with your new policy as the backbone. Live demonstrations, the mistakes that catch people out, and time for questions about the jobs they actually do. In person or virtual.
We come back to see what stuck, tidy up any settings, answer the questions that only appear in practice, and update the policy as the tools change. Ongoing support is available if you want it.
The rules that apply
Personal data typed into an AI tool is still personal data. You need a lawful basis, sensible security and clear records. The ICO has published guidance on AI; we turn it into rules your team can follow.
If you sell into the EU, some uses of AI carry obligations that are phasing in from 2025. We help you work out whether any apply to what you do, and keep a record showing you checked.
Accountancy, legal, financial advice, healthcare and education bodies have all issued their own AI guidance. We align your policy to what your regulator or professional body expects.
Tenders, supplier questionnaires and insurance renewals increasingly ask how you govern AI. A written policy and a training log turn an awkward question into a quick yes.
Worth knowing: we are builders, not solicitors. We handle the practical side and speak plainly about where formal legal advice is needed.
Questions we hear a lot
If anyone on the team uses ChatGPT, Copilot, Gemini or a similar tool for work, yes. Not a long one. A short set of rules about which tools are approved, what data stays out of them and when a person must check the output prevents most of the problems we see, and it answers the question when a customer, an insurer or a regulator asks.
It depends on what your business does and what data it handles. Most small firms are fine with the paid business tier of a mainstream tool, with training on data switched off and access tied to work accounts. We help you choose, set it up properly and write the approved list into your policy.
Yes. We run the same seminar in person at your premises or virtually over a video call, and we can split it across two shorter sessions if shifts make a single half day awkward. In person tends to work better for hands-on trades; virtual suits teams spread across sites.
A typical engagement is a short readiness review, a draft policy and playbook within a week, a half-day or full-day seminar, and a check-in a few weeks later. Most businesses are done inside a month, and most of that is waiting for a date that suits your team.
No. Trades, manufacturers, care providers, agencies and shops all use AI now, often on phones in vans and on shop floors. We tailor the examples to your work: quoting, customer messages, job notes, supplier emails, whatever your people actually do with it.
No, and we do not pretend to be. We are builders who understand how these tools work and how small businesses run. We handle the practical side: the policy, the settings, the training and the records. Where you need formal legal advice, for example on a data protection impact assessment in a regulated sector, we will say so plainly.
Tell us how people work today. We will quote one fixed price for the policy, the review and the training, and you decide.
Talk to us