Defined scope
Up to 15 tool-use records, four contracts, three stakeholder interviews and one consolidated revision.
The Readiness Sprint
Ten business days.
A usable evidence package.
Turn scattered AI-use information into reviewed findings, clear actions and documents your team can maintain.
Fixed scope and fee agreed before kickoff.
What is included
Findings come from what your team reports and the records you share, reviewed against your contract and purchase order terms.
Complete handover
AI use register, vendor records, scoped verdicts, fix list, acceptable use policy, evidence report and two-page AI use summary.
Clear boundaries
Readiness and documentation support, with contract interpretation and technical implementation staying with your team and counsel.
Your ten-day plan
Kickoff and scope
Confirm sponsor, tool-use scope, contract aliases and data boundaries.
You: Confirm owner and provide sanitized metadata.
Agreed scope and evidence request
Discover AI use
Launch staff survey and reconcile license records.
You: Ask staff to respond without work content.
Initial AI use register
Map uses and data
Record exact plans, use cases, connectors and data categories.
You: Security lead confirms data paths in the client environment.
Use and data map
Review contract applicability
Map client-confirmed clauses and identify counsel questions.
You: Contracts lead validates terms and flowdowns.
Applicability record
Review vendors
Check exact offering evidence, terms, training and retention.
You: Provide sanitized vendor references and setting attestations.
Vendor due diligence records
Review findings
Draft scoped verdicts and distinguish facts from assumptions.
You: Resolve missing facts and identify technical reviewer.
Draft verdict register
Plan fixes
Prioritize actions, owners and realistic dates.
You: Accept owners and remediation commitments.
Remediation plan
Draft policy and evidence
Prepare the policy, evidence report and AI use summary.
You: Review exceptions and internal approval process.
Draft delivery package
Validate the package
Check traceability, unresolved items and questionnaire wording.
You: Security, contracts and sponsor review.
Reviewed package
Close out and hand over
Present findings, limitations and next review triggers.
You: Sign receipt and own approvals and open actions.
Final package and closeout record
The clock starts after scope, sponsor and required inputs are confirmed. Missing inputs, specialist review or scope changes may move the delivery date. Technical remediation remains with your team or a separately engaged provider.
Start with what you know
Find the gaps in your AI use.
Get a preliminary view of your tools, data practices and documentation.