Agree a proportionate review
Set the discovery boundaries, permissions and evidence-handling arrangements before any inspection.
03 / Understand where information goes
Data protection and shadow AI assessments.
Understand how AI is really being used, where information could be exposed and how to make approved ways of working easier for staff.
Who it is for
Is this the help you need?
Organisations concerned about staff using unapproved AI tools, unclear information-handling rules, or gaps in visibility over tool access and data flows.
Working together
A practical engagement.
Map use and exposure
Combine agreed discussions and authorised reviews to understand tools, information flows and access.
Make safer working practical
Prioritise findings and agree approved-use recommendations and realistic remediation steps.
What you can take away
Outputs shaped to your needs.
An agreed engagement could include:
- An agreed inventory of AI use
- A map of relevant information flows and access
- Prioritised exposure findings
- Approved-use recommendations and a remediation plan
Scope and expectations
Discovery is authorised and scoped with the customer. This is not covert staff surveillance or an unbounded security test. Evidence access, handling and deletion are agreed before review; specialist investigation may be needed separately.
We agree the scope, deliverables, timing and commercial terms before any engagement begins.
The right next step
Let’s make the scope useful.
Tell us what you are trying to achieve and where you need support.