Govern the AI you've already deployed.

Questions we hear.

We already have AI policies in place. Do we still need the Audit?

The Audit is about exposure, not about whether a policy exists. Most mid-market firms have a one-page acceptable-use policy and three to five AI tools their employees signed up for without IT review. The Audit names which tools are leaking which data and which ones are running outside policy today.

Our IT team handles this.

IT can run a vendor list. The Audit runs the vendor list plus the data classification plus the utilization plus the redundancy plus the exposure mapping, all in operator language a board can read. The deliverable is a two-page exec summary, not a 40-page IT report. That's a different output.

We're too small to need governance.

If you have three AI tools and one of them has access to your CRM, you have governance. The question is whether you have it written down. The Bundle scope is calibrated for $5M to $50M businesses. Smaller is fine; we have an operations track that handles the apps-don't-talk problem before it becomes a governance problem.

What's the difference between the Audit and the Bundle?

The Audit answers what you have. The Bundle answers what to do about it. The Audit is a 10-business-day inventory and exposure read. The Bundle is a five-day engagement that produces written governance policy and a prioritized 30/60/90 action plan. Most CEOs run the Audit first; the $1,500 credits against the Bundle for 90 days.

Will the audit recommend changes we have to act on immediately?

No. The Audit names the three highest-exposure gaps. Whether to act on them, on what timeline, and at what cost is your call. The 60-minute review call walks through options. You leave with a board-shareable document; you do not leave with a forced timeline.