AI Governance Foundations Toolkit
The AI Foundations Toolkit gives professional services firms the governance foundations for effective AI use. This includes, policies, documents, structure, and ongoing support to show clients, insurers, and anyone who asks that your firm's approach is considered, documented, and in control.
Three tiers. One library. A framework that keeps pace with how AI is developing.
Speak with us first. We match you to the right tier and send you a payment link post-call.
An Automation Outcomes service, built for UK professional services firms
AI is already in use across most professional services firms, whether the practice has formally signed off on it or not. The benefits are real and adoption is accelerating. The question most firms are behind on is simpler than it looks: does your firm have a clear, documented position on how AI is used, who is responsible, and what happens when something goes wrong? The AI Foundations Toolkit is designed to help you build that position — and to keep it current as tools and expectations develop.
Without a clear policy, every person in your firm makes their own call on what AI tools can do and what information they can see. That creates inconsistency and gaps in oversight that are hard to detect until they matter.
AI governance questions are appearing in tenders, due diligence packs, and professional appointments. A documented, considered position is increasingly the baseline expectation — having one puts you ahead of the firms that don't.
A governance framework gives your firm a documented, considered position — and the evidence to show your approach to AI use is structured and actively maintained.
The firms that treat governance as a tick-box exercise end up with a filing cabinet full of policies nobody reads. The firms that treat it as working infrastructure end up with a team that uses AI confidently, with professional standards intact, and clients who know it.
| Without a framework | With the AI Foundations Toolkit |
|---|---|
| Staff making individual judgements about what AI tools can access and what data they can see | A clear policy that tells every team member what they can and cannot do with AI — from day one |
| No consistent record of human review of AI-assisted work | A structured evidential record documenting professional oversight of AI output |
| No prepared answer when a client asks about your AI policy | A client-ready transparency document that answers the question before it is asked |
| A PI insurer asking questions you cannot answer with evidence | A governance framework with the documentation to support your PI renewal conversations — and a clear evidential record if questions arise |
| A policy written once and never revisited as tools and guidance develop | A maintained library that updates as the AI landscape and regulatory guidance develops |
Not adapted from a US enterprise framework. Written for the professional context your firm works in.
The AI Foundations Toolkit covers the full scope of what a professional services firm needs to use AI effectively — from the foundational policy that defines how AI may be used, through to how that use is evidenced and communicated externally. Professional-grade documents, maintained as the landscape develops, at a fixed annual fee.
The library is organised around six practice areas, each addressing a distinct dimension of effective AI use.
The core library is written for professional services firms: the professional obligations, client relationships, and PI exposure that come with delivering advice, services, and expertise. It does not need to be adapted from a generic business framework because it was built for this context from the start.
The following describes how the core library applies in each sector. The Toolkit addresses governance structure and documentation, not sector-specific regulatory compliance — see the important notice below for the full scope of what the Toolkit is and is not.
Law firms using AI have specific concerns around client confidentiality, professional review of legal research and submissions, and how AI use is reflected in PI cover. The human oversight record, data classification materials, and client transparency pack are the documents legal practices reach for most. Tier 3 tailoring addresses your primary practice area and client communication approach.
Accounting and audit practices need a clear position on where AI may and may not contribute to engagement work, and how professional judgement is evidenced when it does. The human oversight record and data classification materials are central. Tier 3 tailoring reflects the specific context of accounting and audit practice.
FCA-regulated firms need governance that addresses AI use in client-facing contexts, the boundary between AI output and professional advice, and the record-keeping that follows. The human oversight record, Responsible AI Policy, and client-facing materials are particularly relevant. Tier 3 tailoring reflects your regulated context and disclosure requirements.
For consulting firms, the governance questions that matter most are around PI cover, professional duty of care in AI-assisted analysis and recommendations, and information barriers across concurrent client engagements. The human oversight record and tool approval materials address these directly.
Surveyors using AI in valuations and technical reports need documented professional review and clear data handling practices for client property information. The human oversight record, data classification materials, and client transparency pack are central to the toolkit's practical value for surveying practices.
Insurance firms using AI in underwriting, claims, and customer communications need documented oversight, clear record-keeping, and customer-facing transparency materials. The evidential record, monitoring materials, and tool approval framework are particularly relevant to how this sector uses AI in client-affecting decisions.
Start with the tier that fits where you are today. Upgrade as your needs develop.
Choose the right tier for your firm. Book a short call and we will confirm the fit and send you a payment link.
For the cost of a software subscription, your team has the core governance documents they need to use AI with a clear, documented position — and you have the materials to speak to clients and insurers with confidence. These are the documents a small team uses every day: what staff can and cannot do with AI tools, what data they can share, how to evidence human review, and how to communicate your approach externally.
30-minute call. No commitment.
Everything you need to implement a full governance framework — professionally drafted, structured, and ready to adapt, with guidance at the moments it matters most. The three sessions have defined agendas so you know exactly what each one covers and can prepare. Your firm runs the implementation; the guidance sessions are there to support it.
30-minute call. No commitment.
After twelve months, your firm will have had every session, document, and structured touchpoint needed to build a governance framework your team actually uses — and the record of how it was built. Implemented is for firms that want governance that works — not just governance that exists. The monthly AI workshop is what makes the difference: a regular structured session that keeps your framework in active use rather than sitting on a shelf.
30-minute call. No commitment.
Start with the tier that fits your firm today. If your needs develop, upgrading is straightforward — we move you to a full twelve-month subscription on the new tier, with a credit calculated by reference to the number of days remaining in your current subscription period. Your documents, history, and settings carry across. No upgrade penalty.
Annual subscriptions run to the end of the subscription year. If you cancel, your subscription continues until that date — you will not be charged further but no refund is issued for the unused portion.
Ten sessions from month three. Structured around your team, your tools, and your sector.
The first two months of Implemented focus on getting your framework in place: tailoring your documents, completing three structured implementation guidance sessions, and delivering the Framework Launch Workshop. From month three, a structured one-hour session each month gives your team a space to review what's working, surface any challenges, and stay current with developments in AI tools and guidance. This is a practical conversation that keeps your governance framework in active use rather than on a shelf. By the end of the year, your firm will have had every session, document, and structured touchpoint needed to build a governance framework your team actually uses — and the record of how it was built.
What AI tools and use cases are active this month, and are any new tools in use or under consideration?
Where has AI saved time, improved quality, or supported a client conversation since the last session?
What has not gone as expected — any incidents, near-misses, or team questions to address?
What has emerged in the AI tool landscape or regulatory guidance that the firm needs to be aware of?
What does the firm want to do differently next month, and who is responsible for it?
One session. Your framework, live.
A structured two-hour activation event, built around your oversight team, your sector, and a governance framework that is already complete.
By the time the Framework Launch Workshop takes place, the tailoring is done. Your documents reflect your sector context, your oversight team is named and configured, and the three implementation guidance sessions have taken your governance leads through every stage of the framework. What the workshop does is activate it — for the people who will run it, and the firm that will use it.
The session covers four stages: a final review and sign-off of the completed framework with your oversight team members present; governance body activation, including a guided walkthrough of how to run your first quarterly meeting using your own documents and terminology; firm-wide communication, covering how to introduce the policy to staff and handle the questions that follow; and client-facing readiness — preparing you to deploy the Client AI Transparency Pack in tenders, due diligence, and client appointments. The session closes by setting up your first monthly AI workshop, so month three starts with clear priorities rather than a blank page.
Your oversight team arrives at the workshop with a governance framework that has already been built around them. This session brings that framework to life: reviewing, activating, and preparing your firm to use it — with clients, with staff, and in the quarterly governance meetings that will keep it running.
This is not an introduction to a generic framework. Your oversight team is activating governance infrastructure that has been built around them.
AI governance isn't a project you complete. It's an environment you operate in — and that environment is developing continuously. Sector regulators are publishing guidance on a rolling basis. Professional bodies are updating their positions. The tools your team uses are changing faster than any policy written to cover them can keep pace with unaided.
That's why the AI Foundations Toolkit is a subscription, not a one-off purchase. We monitor regulatory and tool landscape developments on an ongoing basis and issue updates as we identify material changes. This service assists with your updates but does not replace the need to track developments within your own regulatory framework.
You keep all documents as at the end of your final subscription period. They remain yours to use. You simply no longer receive updated versions as guidance develops. If you resubscribe, you receive all updates from the point of renewal.
Perpetual licences are available on request for Tier 2 and Tier 3. A perpetual licence covers the documents as delivered at the date of purchase and does not include ongoing updates, sessions, or workshops. Contact us to discuss.
The AI Foundations Toolkit was built by practitioners who have worked directly with UK professional services firms on AI adoption, enablement, and governance — not adapted from a US enterprise framework or a generic template.
The framework is developed with reference to the UK regulatory and professional landscape firms operate in, and informed by internationally recognised AI governance frameworks including ISO/IEC 42001 and the NIST AI RMF. EU AI Act obligations are reflected where applicable to UK-operating organisations. The framework does not constitute advice specific to any of these regimes. It is also grounded in the reality of how small and mid-size professional services firms actually work — without a dedicated compliance function, without a technology department, and without the budget for a six-figure consultancy engagement.
Built by Automation Outcomes — the team behind Business Automation for Non-Technical Professionals (bafnt.ai). We work directly with professional services firms on AI adoption, enablement, and governance.
Book a short discovery call. We'll confirm the right tier for your firm and send you a payment link.