What is actually going on here?
Which tools does your team use — including those nobody approved. Private accounts are the most frequent finding, and the most unpleasant: they are under nobody's contract.
Service
Before you buy anything, you should know what you have.
AI is already being used in almost every business — but nobody knows which tools, on whose computers and with what data. The audit turns that into a list, ranks it by risk and benefit, and names the one building block that pays off first.
Two days in the business
Written findings
No software needed
What it is about
Three questions that nobody can answer beforehand.
How much of this holds up?
For each tool found: where is the data processed, how long does it stay, is there a data processing agreement. ⛔ We also say when something is fine — an audit that criticises everything is not one.
What pays off first?
What you end up with is not a wish list but a sequence. The first building block is the one your week will feel most — not the one that makes the biggest impression.
How it works
Two days, then it is on the table.
01
Preliminary discussion, one hour
What you do, who works in the business, what annoys you most. Still without technology.
02
A day in operation
We watch how work is done — at the workplace, not in the meeting room. The interesting things are rarely found on the organisation chart.
03
Stocktake
Tools, access rights, data paths, contracts. What exists, what is missing, what nobody uses any more.
04
Findings and sequence
In writing, in your language. With a clear first measure — and the reason why this one.
What is there afterwards
What you have in hand afterwards.
- A list of all the AI tools actually used in your business — including the unapproved ones.
- For each tool: place of processing, retention period, contractual situation.
- One page of house rules as a draft: what is allowed, what must be checked, what never belongs in.
- The order of the next steps, with reasons.
- An honest assessment of where you do not need to change anything.
And what it does not
This is here because everything else would be worthless without it.
Anyone who promises everything is switched off at the first objection. That is why we say beforehand where the limit lies.
It is not a certification
We issue no seal and no certificate of conformity. The audit is a stocktake for your decision, not an audit report for third parties.
It is not legal advice
We show source references and facts. The legal assessment in an individual case is a matter for your lawyer or your data protection officer.
It does not end with an obligation to buy
If the finding is that you need nothing for now, that is what the report says. That has happened to us before.
Frequently asked questions
The questions that come first.
How much time will this cost us?
One hour of preliminary discussion, one day in the business, then we continue on our own. Your team is accompanied on that one day during normal work — it does not have to prepare anything or clear anything.
Do we have to tidy up beforehand?
⛔ Please don't. A tidied-up state shows how it should be, not how it is. The value of the audit lies precisely in the second.
Does management find out who used what?
The findings name tools and data paths, not people. Anyone who used a private account almost always did so because a tool was missing — that is a finding about equipment, not about the person.
What does it cost?
That depends on the size of the property and how many sites belong to it. ⛔ We do not give a figure here that we have not checked against your business.
Can we carry on ourselves afterwards?
Yes, and that is explicitly intended. The findings and sequence are written so that your own IT or another service provider can work with them.
Bring us your biggest annoyance.
One conversation, one real task from your daily work. We use it to show what AI and automation can do for you.