AI Risk Health Check
A fixed-price external review of how AI is actually being used in your business, what it is exposing you to, and what to fix first. $2,500 to $7,000 depending on size, agreed before work starts.
Your staff are already using AI. Nobody decided that. It happened.
Somewhere in your business right now, someone is pasting something into an AI tool. Maybe it is harmless. Maybe it is a customer list, a contract, or payroll data. You do not know, and that is the actual problem.
There is no policy. Nobody approved the tools. Nobody can tell you what data is going where. If a customer, an insurer, or a regulator asked tomorrow how AI use is controlled in your business, the honest answer would be that it is not.
There is a cost side too. AI subscriptions get bought on a company card, used twice, and kept. Nobody owns the list, so nobody cancels anything. You end up paying for tools you cannot name and carrying risk from tools nobody approved.
This gap stays invisible until something forces it into view: a data question you cannot answer, an insurance renewal, a customer contract with an AI clause in it, or a staff member doing something well-intentioned with the wrong data. The Health Check exists so you find the gaps before one of those does.
A structured review.
Not open-ended consulting.
The AI Risk Health Check is a fixed-price review of how AI is being used across your business, what risk that use creates, and what needs attention first. Defined scope, defined deliverables, a price agreed before it starts. Not a retainer, and I have no tools to sell you.
It is built on the AICD's AI governance guidance for SME and NFP directors, applied to your actual tools, data, and workflows. The findings are things you can act on and defend, not theory.
New Privacy Act transparency obligations for automated decision-making commence on 10 December 2026. If AI touches decisions about customers or staff in your business, it is cheaper to get ahead of that than to react to it.
Defined deliverables.
A short call to confirm fit and scope before any commitment. No charge.
A structured walk-through of the AI tools in use, how data is handled, and where AI sits in decisions that affect customers or staff.
Findings rated red, amber, or green across governance, data, operations, and policy, mapped to named obligations including the Australian Privacy Principles.
What to fix first, specific to your business, in plain language.
Written for your tools, your data flows, and the obligations that actually apply to you. Not a generic template.
What the report looks like.
This is one page of a real scorecard, sanitised from a composite engagement. Findings in plain language, each rated red, amber, or green, tied to the obligation it touches, with where to route it next.
$2,500 to $7,000. Published, because it should be.
Where you land in the range depends on headcount, how many AI tools are in play, and how complex your data handling is. The price is fixed and agreed before work starts.
The price is on this page because you should not have to book a call to find out what something costs.
Built for businesses without a technology executive.
Australian businesses between $1M and $20M in revenue. Owner-led, or a small executive team. No internal IT leadership, or an IT function built around keeping things running rather than governing risk.
If you have a CIO and a functioning risk committee, you likely need something bigger than this, and I will tell you that on the intro call.
What this is not.
It is an independent advisory review.
No affiliate arrangements, no products to push, no interest in which tools you choose.
If the findings say you are in reasonable shape, that is what the report will say.
Start with the 15-minute call.
If this is not the right fit for your situation, I will say so on the call, and it costs you nothing.