Your staff already use AI. Do you know which tools?
A two to three week review for firms that buy AI. You get a list of tools, a risk group for each tool and a 90-day plan.
Book a 20-minute call20 minutes. Not legal advice, an audit or a certificate. Free. 18 questions. Result on screen and by email. 15 years delivering enterprise IT and AI projects.
Three worries this review answers
Staff use AI nobody approved
Personal chatbot accounts, browser add-ons and vendor features hide in plain sight. A short survey and a register bring them into view.
Staff paste client data into chatbots
Here are three checks to run this month. They need one rule, one approved tool and a look at each vendor’s terms.
AI Act dates are unclear
A firm that only uses AI carries different duties from one that builds it. See which dates apply to you.
What you get
- AI register
- Every AI tool in use, who owns it and what data goes in.
- Risk group per tool
- Banned, high-risk, needs transparency or low risk, with a one-line reason.
- Ranked gap list
- What to fix first, why it matters and how much effort it takes.
- 90-day plan
- Each action with an owner and a due date.
- Staff AI use rules
- Two plain pages: approved tools and data that must never go in.
- Training plan
- One page by role, with a simple log.
| Tool | Data in | Risk group |
|---|---|---|
| Writing assistant | Internal | Low risk |
| Customer chatbot | Client confidential | Needs transparency |
| CV screening feature | Personal data | High-risk |
Made-up rows. No client names.
How it works
-
Day 1: kick-off call
90 minutes. You name an AI owner. We send the staff survey and the register.
-
Day 12: walk through the gaps
A second 90-minute call. You see the gaps and agree what to fix first.
-
Day 14: report
You receive the report with your register, ranked gaps and 90-day plan.
Two to three weeks. About four hours of your staff’s time.
Not legal advice, an audit or a certificate. Your counsel confirms your legal duties. We work from tool names, owners and data types, never from your client records.
Who runs the review
15 years delivering enterprise IT and AI projects.
SamratNotes takes apart real, public AI failures to show what companies buying AI should have checked.
public AI failures studied.
One failure story, one check, one law date
Every two weeks, by email. Free. Unsubscribe in one click.