AI Governance That Speeds You Up
Practical policy, right-sized oversight, and ready answers for clients, insurers, and regulators.
Your staff are already using AI, whether or not you have a policy. Governance does not need to slow that down. Done well, it tells people which tools they can use, how to use them safely, and whom to ask, so they can move faster with less risk.
What an AI readiness review covers
- Which AI tools are in use today, approved or not.
- Where sensitive data could leave the organization, and how to prevent it.
- Vendor terms for data retention, model training, and security. For one vendor worked through in detail, see Managing training and data retention across Claude plans.
- The questions clients, funders, insurers, and regulators are likely to ask, with answers ready.
What you receive
- A written AI use policy sized to your organization.
- A short list of approved tools and the settings that make them safe to use.
- A lightweight process for reviewing new tools and new uses.
- Training for staff on the policy and on using AI well.
Why me
I co-chaired the AI Taskforce at a professional services firm where client confidentiality set a high bar. We evaluated and adopted generative and agentic AI tools, rolled out Microsoft Copilot, and piloted tools including Claude Code, with change management behind each step. I bring the same approach to your organization, scaled to your size.
- Your firm's AI policy needs a second page
California's SB 574 and the Third Circuit's ROSS ruling change what a law firm's AI policy has to cover. Gail Jefferson on the legal shifts, and Christopher Fryer on the vendor terms, monitoring, and gateway controls that a one-page policy now needs behind it.
- Managing training and data retention across Claude plans
Training and retention are separate controls on every Claude plan. What each plan does by default, how to stop training, where zero data retention is actually available, and what I would configure for an individual, a small firm, and a law firm.
- Your staff are already using AI. Start with a one-page policy.
A ban on AI hides the risk instead of removing it. A one-page policy tells staff what they may use, what they must never share, and whom to ask, and it takes about a month to put in place.