advisory / 01
AI Readiness Check
Know where AI is used, what it touches, and what already applies.
Most organisations cannot list their own AI uses. The tools arrived through staff accounts, a pilot, a supplier and a department that wanted to move faster — and nobody owns the list, because until recently nobody needed one.
Two to three weeks to know exactly where AI is used in your organisation, what it touches, and which duties already apply — in a scorecard you can act on without me.
you receive
You receive: a scorecard report — the AI inventory including the tools your staff signed up for themselves, a risk class per use, the data-protection triggers, and an action list ranked by exposure: keep, scale, kill.
what is fixed
- 01
the inventory: every AI use I can find — named systems, embedded features, and the consumer tools your staff signed up for themselves
- 02
a risk class per use: a screening against the high-risk categories, with the reasoning written down rather than asserted
- 03
what each use touches: personal data, customer data, employee data, or nothing that leaves the building
- 04
the duties that already attach, with their dates: AI literacy has applied since 2 February 2025; transparency duties since 2 August 2026
- 05
an action list ranked by exposure, not by enthusiasm: keep, scale, or kill — with the cheapest next step named for each
- 06
the open questions I could not close from the documents you gave me, listed as open
engagement shape
2–3 weeks, fixed scope agreed in writing before the first day. Public administration: 15 working days, fixed price, written German deliverable, worded so it can go into a direct-award justification. No price is printed here — the number belongs in the scope note.
2–3 weeks, fixed scope · 15 working days on a fixed window · scope fixed in writing
segment variants
- startups
- one week of triage if you need the answer before a board meeting
- SMB
- the list of what staff already do with AI, in plain language, and what to switch off first
- enterprise
- input for the audit workstream, plus a checklist for the vendor proposals you are about to receive
- non-tech
- the plain-language list, sized to an organisation with three AI uses rather than fifty
- public administration
- 15 working days, fixed price, a written German deliverable that can be pasted into the procurement file
not for
not a strategy — the strategy comes after the inventory.
the artifacts behind this format
the next step
public administration
15 working days, fixed price, written German deliverable, worded so it can go into a direct-award justification.
last refreshed 2026-10-17 · reviewed quarterly
Sources: European Commission, AI Act regulatory framework (retrieved 17 October 2026).