What does the AI review involve?
A short, fixed piece of work that shows what AI is in use across your business and where the risks sit. It doesn’t collect prompts, chats or documents, and we tell you in writing before it starts what it records and how the details are held. If you already have a suitable discovery tool, the review can use it. A findings meeting then covers what we found and what we couldn’t see, the quick wins and your AI spend, and which of our services fits, if either. For regulated firms, the findings are set against what your regulator expects.
What does the AI governance assessment involve?
A fixed piece of work that looks at how AI is governed in your business today, stage by stage: who owns each use, which agents act in your systems and how far they are allowed to go, what AI costs and what it returns, and what your board is told. You get a short report for your leadership on where you stand, what to put right first and which of our services fits, if either. It suits organisations whose first question is how AI should be governed, rather than what AI is in use.
Is there a fee for the AI review or the assessment?
Yes. Each has a fixed fee that we agree with you before it starts.
What don’t you do?
Our checks are our own, not an audit opinion or a certification; independent assurance comes from your internal audit or a third party. Our work is not legal advice, and whether a law applies to you is for your legal advisers. We don’t change your systems, validate them or make your decisions: your IT and your accountable people do. We never look inside personal accounts.
What happens to our data?
We answer your data protection questions in writing before any work starts. No Peruze person sees the content of your documents, emails, chats or agent conversations. Your register, policy and evidence stay in your own systems, such as Microsoft 365, and you keep them if you stop. We don’t make changes in your systems: your IT stays in control. We work only through the access you grant, limited to what the work needs, and you can remove it at any time. Where we handle personal data for you, we act as your processor under a written agreement, and our sub-processors are listed on request. AI use is reported by tool and team rather than by individual, we recommend it isn’t used for performance management, and we recommend telling staff, and their representatives where you have them, what is recorded before anything starts.
Which service do we need?
If your people use AI tools but no AI acts in your systems or deals directly with your customers, AI Usage Oversight is likely to be enough for now. If an agent already acts in your systems, or customers are about to instruct one directly, the AI governance service is the right place to start, and you can go to it straight from the AI review or the assessment. See both services.
What if an agent is already live?
You don’t have to wait for set-up. AI stabilisation helps your team put that agent on probation quickly and ends with a clear decision on what happens next. It doesn’t commit you to the governance service.
Do we need to buy new tools?
Not to get started. Where governance technology earns its place, we can supply it. We name it and an alternative in writing before you agree to anything, and tell you how we are paid for it.
Are you tied to any vendor?
No. We are independent of the people who build and sell your AI. No vendor sets our recommendations, and your AI decisions stay with your business. We work with a small number of technology companies, and where we suggest one we name an alternative in writing too. If you change partners, models or tools, your register and evidence carry on unchanged.
Do you fix what you find?
No. We draft the rules and set out what needs to change; your own team or IT partner makes the changes and runs the controls. We track progress and report it to your board.
What if a partner introduced us?
We tell you about any arrangement we have with that partner, and who makes any changes is always your choice.
Who does the work?
The founders, with governance and security specialists we bring in as each engagement needs, so you aren’t relying on one person.
Who do you work with?
Organisations where AI is starting to matter to how the business runs, from single firms to groups with several entities. We agree the scope with you after the walkthrough.
