AI Compliance Starter Kit

The problem

Your clients are asking whether you use AI with their data — and most firms don’t have a good answer. The contracts say “no AI,” but the tools are too useful to abandon. You’re stuck between staying competitive and staying compliant. Meanwhile, staff are improvising their own answers, using personal AI accounts, and hoping no one asks too many questions.

The good news: most contract clauses are aimed at public AI services where data gets used for training — not AI in general. There are compliant paths. You just need the analysis, the policies, and the right tooling to get there.

What we deliver

Phase 1 — Discovery & Analysis

• Contract review — we examine your existing client contracts for AI-related language, restrictions, and exposure
• AI usage assessment — we map how your team currently uses AI tools and where the compliance gaps are
• Data scope identification — we identify which data types are in scope and the associated risk level for each

Phase 2 — Policy Development

• External AI use statement — a client-facing document that tells clients exactly how you use AI in your work, building trust rather than eroding it
• Internal acceptable use policy — staff guidance covering what AI tools are approved, what data can be used, and what the guardrails are
• Client contract AI addendum — draft language to add to new and existing client agreements specifying approved AI tools and data handling commitments

Phase 3 — Tooling & Controls (Full Kit only)

• Tool selection & setup — we configure a compliant AI environment (Claude Team or API) where your data is not used for model training by default
• Audit trail configuration — logging and evidence collection so you can demonstrate compliant AI use if a client ever asks

The process

1. Week 1: Discovery We review your contracts, interview key staff, map your current AI usage, and identify the gaps. This analysis drives everything that follows — the policies reflect how your business actually works, not a generic template.
2. Week 2: Build We draft the policy documents and review them with you. Full Kit: we configure your compliant AI environment and audit trail in parallel.
3. Week 3: Finalize & Handoff We incorporate your feedback, finalize all documents, and do a walkthrough with your team. You get: all policy documents, a written implementation guide, and a 30-day check-in scheduled.

Pricing

What you need