Let's talk

Find the AI your teams are already using, before someone else asks

Fixed-price AI usage, risk and governance review

Guard is a fixed-price review of how AI is really being used across your business. In two to four weeks you get an inventory of the tools and what goes into them, a risk register, a governance framework, an acceptable use policy and a plan to close the gaps, without stopping the useful work.

Price
from £7,999 plus VAT
Duration
2 to 4 weeks
Fee credited
Credited against follow-on work
Book a 30-minute call See what you get

We confirm the scope and the fixed price before you commit.

ISO 42001 certified · Anthropic partner · 30 years building and running digital products

Sound familiar?

Customers are adding AI questions to security questionnaires, ISO 42001 is becoming the benchmark, and the EU AI Act already applies to businesses using AI in the EU.

Getting ready takes months, and it's easier before someone asks.

  • Nobody can say which AI tools people are using, or on whose accounts.

  • Staff paste customer or company information into public AI tools.

  • Your policies don't mention AI, or mention it in one line.

  • AI-written work reaches customers without anyone checking it.

  • Legal, IT and operations each assume someone else owns AI risk.

The cost of doing nothing

Banning AI doesn't stop it

It just moves it onto personal accounts, where you can't see what's being shared.

Guard shows you what's really in use, what data is going into it, and the proportionate controls that let people keep using it safely.

See what you get

What you get

  1. AI usage and shadow AI audit: which tools, who uses them, what data goes in

  2. A data and AI risk register

  3. A governance framework and acceptable use policy

  4. A compliance gap review against ISO 42001 and upcoming regulation

  5. A remediation plan with owners and priorities

How it works

Find it, assess it, set the rules

We map the AI already in use, assess the risk of each use, and give every one a clear status.

  1. Survey and interviews across teams

  2. Tool and data mapping

  3. Risk assessment and gap review

  4. Policy, plan and playback

What we need from you

  • A named sponsor, and access to the people who buy and approve tools.
  • Time for a short staff survey, and six to eight interviews across teams.
  • Your current security, data and IT policies.

After the review

What you can decide afterwards

Every AI use you find gets a status, so people know where they stand.

  • Approve

    Useful and low risk. Carry on, with the guidance in the policy.

  • Restrict

    Useful, but only with approved accounts, certain data or a human check.

  • Replace

    The need is real but the tool isn't safe. What to use instead.

  • Stop

    The risk outweighs the value, with the reason recorded.

Scope and price

A fixed price for the whole business

Scoped to the teams and tools involved, and agreed before we start.

What's included

AI tools and AI features in the software you already use, across every team, including use on personal accounts.

Assumptions

  • One business. Several legal entities or markets are quoted separately.
  • We give you a governance and technical assessment. Legal interpretation comes from your lawyers.
  • The ISO 42001 work is a gap review. Certification is done by an accredited body.

What's not included

Certification audits (we prepare you; an accredited body certifies).

Price

from £7,999, plus VAT

Book a 30-minute call

Fee credit

Sign any follow-on work with us within 60 days of the playback and the full fee is credited against it. Third-party costs aren't included.

What affects the price

The number of teams, entities and markets, and whether you want help implementing the controls.

How we work it out

  • We survey staff anonymously, so people tell us what they actually use.
  • We map each tool to the data going into it and the decisions coming out of it.
  • We assess the risks with the method we use for our own ISO 42001 certification.
  • We write controls in proportion to the risk, so useful work isn't blocked.

We hold ISO 42001 ourselves, alongside ISO 27001 and ISO 9001, so this is the same method we use to run our own business.

Proof

Questions

The things people usually ask

Plain answers on how Guard works, what it costs and what we need from you. Anything else, just ask.

We've blocked public AI tools. Isn't that enough?

Blocking rarely stops use. It moves it onto phones and personal accounts. And it doesn't govern the AI built into tools you've already approved.

Doesn't our information security policy already cover this?

It probably covers data handling. It usually doesn't cover who approves an AI use, who checks AI output, or what happens when it's wrong.

Is this legal advice?

No. We assess the technical and governance side and map it to ISO 42001 and the EU AI Act. Legal interpretation should come from your lawyers.

Does this get us ISO 42001 certified?

It gets you ready and shows the gaps. Certification is done by an accredited body, and we can support you through it.

Will governance slow everyone down?

Done well, it speeds things up, because people know what's allowed without asking every time. We won't tell you to ban AI.

Goes well with

Projects

Bigger products and platforms, built end to end or with our specialists in your team.

Typical range
£50k to £250k+

  • Diagnose

    Uplift

    AI opportunity and discovery sprint for your product

    Know exactly where AI makes your product better, and what to build first.

    Price
    from £9,999
    Duration
    3 to 4 weeks

  • Diagnose

    Assure

    Website privacy, consent and accessibility check

    Make sure your website's privacy, cookies and accessibility would stand up to a complaint.

    Price
    from £4,999
    Duration
    1 to 2 weeks

If we sound like a good fit, let's talk.

We'll only use your phone number to call you back. See our privacy policy.

Or use our contact form