Home · AI · Readiness assessment
AI Readiness Assessment
A published scope, seven named deliverables and a fee quoted to what your environment actually holds. You find out what AI your people are already using, what your own software vendors have given themselves permission to do with your data, and what a rollout would cost before you commit to one.
Seven named deliverables
Scope published before you sign
The findings are yours to keep
Why this exists
Nobody has counted what is already in the building
In most businesses we look at, the question is never whether to start using AI. People started months ago, on personal accounts, with whatever was open in the browser. Proposals and financial figures have been pasted into tools nobody has read the terms of, and the firm has no record of any of it.
The second surprise is usually bigger. Software you already pay for has been quietly adding AI features, and the permission to train on your content is often buried in a contract you signed years ago. That is a live exposure even if nobody on your staff has ever opened a chatbot.
This assessment answers three questions in writing: what is happening now, what it is exposing you to, and what the useful version would cost. It stands on its own. Nothing in it obliges you to buy anything afterward.
The scope
Seven deliverables, named before you sign
Every one of these arrives as a document you keep. If a provider will not tell you what you get before you pay, that is the whole reason we publish it here.
One
Tool inventory and shadow-AI discovery
What is actually in use across your browsers and devices, including the accounts nobody signed off on and the free tiers people opened themselves. This is the part that surprises owners most.
Two
Use-case risk tiering
Each way your people are using these tools, ranked by what happens if it goes wrong. Summarizing a public article and drafting a client deliverable are not the same risk and should not carry the same rules.
Three
Data-flow mapping
Which of your information reaches which tool, and where it is stored afterward. The map also names who at that vendor can see it, written so you can hand the whole thing to a client or an insurer who asks.
Four
Vendor AI risk in your existing contracts
We read the AI clauses in the software you already pay for. Several of the products a professional firm runs have added training rights by amendment, and the setting that turns it off is frequently on by default.
Five
Model evaluation
Which tools earn a place in the work your firm does day to day, tested against your own material. Sometimes the answer is the one you are already licensed for and nobody has configured.
Six
A rollout plan with an order and a price
What to do first, what it costs, and what has to be fixed before each step is safe. Permissions work usually comes before anything else, which the Copilot page sets out in detail.
Seven
A draft acceptable use policy
Written around what the discovery turned up, so the rules name the tools your people opened and the files they handle. You get it as a draft to take to your own people. If a policy is the only thing you need and you already know what is in use, the acceptable use policy page covers that on its own, template included.
What it costs
Quoted to your environment, and you keep the work
How the fee works
Quoted after a short conversation, because scope is the variable. Twelve laptops and one cloud tenant is a different job from sixty people across three sites with ten years of history on a file server. Fifteen minutes and you will have a number.
Ask what yours would cost →
Yours to keep
The inventory, the maps and the plan are your documents. Take them to your board, your insurer, or a competitor of ours. All three should be able to read them the same way.
No obligation
You have paid for the work. If the honest finding is that you should do nothing for six months, that is what the document will say.
Which one do I need
This one, or JOUST?
We sell two paid assessments and they answer different questions. Buying the wrong one is a waste of your money, so here is the short test.
JOUST asks whether the business is sound
The whole operation put under examination, with a written report and a fixed order of work at the end. Start here if you are not certain your backups restore or your accounts are properly controlled. Those things come before AI, because AI built on a weak foundation just spreads the weakness faster.
This one asks whether you are ready for AI
Start here if the foundation is already in decent shape and the pressure is coming from somewhere else. Usually that is a partner asking what you feed these tools, or your own people quietly getting on with it. The two can be bought together, and we discount the pair.
If you only want the policy. Some firms know exactly what they are using and only need the rules written down. That is the acceptable use policy, and it is a smaller piece of work than this.
Common questions
Before you book it
How do you find tools nobody told us about?
Will this tell us to buy AI, or tell us the truth?
We already have Microsoft 365. Do we need anything else?
What do you need from us, and how long does it run?
Do we have to be a managed IT partner of yours?
Find out what is already happening
Fifteen minutes on the phone will tell you whether this assessment is the right spend for where your firm is. Where it is not, that is what you will hear.