Professional services firms
Law firms, accountants, agencies and consultancies all face the same version of this: the work is confidential by obligation, the tools are useful enough that people use them anyway, and the firm's engagement letters say nothing about it. Clients have begun to ask. We set the rules by material type rather than by tool, evidence the configuration, train the people who actually handle client files, and give the firm a clear answer when the question comes.
When this usually becomes urgent
Governance work rarely starts from a general wish to be responsible. It starts from an event with a date on it. These are the ones that bring this business to us.
- A client asked whether their material goes into AI tools
- Staff adoption ran ahead of any firm-wide rule
- An insurer or professional body raised AI use
- You want to use AI openly without a confidentiality problem
Where this business usually starts
Not a bundle - three engagements that answer the triggers above, in the order they normally bite. Each is bought on its own, and the badge on every card says how much of the governance model that engagement actually covers rather than leaving you to guess.
Professional services firms
Start with the trigger you already have.
Published ranges, a written scope with its exclusions named, and an honest view of whether the engagement is worth buying at all. Scoping the problem costs nothing.