AI governance
Your team already uses AI. Now make it safe.
We find out what people use, then write a short policy and list the tools safe for client work.
Built forQopia FinancialJSI Systems
Rules your team will actually follow
In most firms, people already use AI on personal accounts and nobody has set the rules. We ask what they use and why, without judgment, and write the policy from that.
Start with what to do when staff use personal AI accounts, or copy the AI use policy template for free.
4 decisions, settled once
Which tools, on which plans
A personal plan and a business plan treat your data differently. The AI tool register shows how.
What never goes in
Client information, passwords, and anything a contract or regulator restricts.
Who signs off
AI output stays a draft until someone has read it and stands behind it.
What clients are told
One position, checked against your contracts.
What you get
A use survey
What people use today, and what for.
The policy
Short, specific to your firm, and easy to follow.
Approved tools list
Each tool, its plan, and what it may be used for.
A first build
One process running inside the rules, so the policy has a working example.
Kept current as tools change
- A personOwns the policy and the approved tools list
- The systemKeeps a record of what each build looked at and did
- A personReviews anything that would hurt if it were wrong
- A personRe-checks the tools when a vendor changes its terms
Who it’s for
Where it fits, and where it doesn’t
It fits
- Staff use AI, and nobody has set the rules
- A client, insurer or auditor has asked about AI
- You hold confidential client material
It doesn’t
- A certification or a formal audit
- A policy to file and never use
- An outright ban on AI
Questions about AI governance
Do we have to tell clients when AI was used?
It’s a policy decision, and some contracts make it for you. Our answer on disclosure covers how to decide.
Is ChatGPT safe for client data?
It depends on the plan. The register shows how each plan of each tool handles your data.
Who should own the policy?
One named person who can say no. Usually operations or a managing partner, not IT alone.
Is this a legal service?
No. We write a working policy. Have your lawyer review anything with legal weight.
Your brief · 1 of 3
What brings you here?
See what we’d build first at a firm like yours.
Keep reading
Start with one process.
A working session on how your firm actually runs. You leave knowing the first process worth fixing.