Banning AI would have pushed usage further out of sight. The firm needed to know what was already happening, offer something better, and prove it to clients.
What we did
Found real AI usage from network and SaaS logs.
Wrote the AI policy and risk register with the business, not for it.
Launched an approved AI gateway with data loss prevention and a model inventory.
Ran the organisation through ISO/IEC 42001 readiness.
Guardrails
Approved tools only, reached through the gateway.
Sensitive-data redaction before any prompt leaves.
A named owner for every AI system in the inventory.
Analytics cookies
We use Google Analytics to see which pages people read. No advertising, no selling data. Privacy policy
