No IT department. Plenty of AI.
Tools arrive on expenses. Staff use personal accounts.
Platform £1,800 to £6,500 a month · audit £7,500, credited
of UK employers have a formal AI policy (CIPD, 2026)
of UK employees have used unapproved AI tools at work (Microsoft UK, 2025, vendor survey)
did so because there was no approved alternative (Microsoft UK, 2025, vendor survey)
First findings within 48 hours of your health check.
Issues detected · needs attention first
| Issue | Rule | Severity | Owner | Status |
|---|---|---|---|---|
| Payroll file uploaded to an external AI tool | R-15 | High | HR Director | Blocked · reviewed |
| 31 personal AI accounts found in Sales | R-02 | High | Head of Sales | Migrating · 27 done |
| Customer data in a prompt without redaction | R-01 | High | Ops lead | Redacted · 0 left |
| Premium model used for internal drafts · 412 requests | R-07 | Medium | Engineering lead | Rerouted |
| CRM "AI assist" running without a DPIA | Policy | Medium | Head of Sales | DPIA in progress |
| Agent attempted an external email | R-12 | Low | S. Reid | Held · approved |
| Job | Owner | RAG | Effort | Cost to date | Forecast | Actual | Variance | Return / yr | Status |
|---|---|---|---|---|---|---|---|---|---|
| Migrate personal accounts to managed | IT Director | 12 d | £4,200 | £6,000 · 20 d | £4,200 · 12 d | −£1,800 · −8 d | risk | Done | |
| Route everyday tasks to standard tier | FD | 3 d | £900 | £1,200 · 4 d | £900 · 3 d | −£300 · −1 d | £58,400 | Done | |
| Payroll upload block (R-15) | HR Director | 1 d | £300 | £300 · 1 d | £300 · 1 d | 0 | risk | Done | |
| Collections letters via Comms agent | Head of Collections | 18 d | £11,600 | £14,000 · 25 d | Pending | on track | £96,000 | In progress | |
| KYC document checks | Head of Onboarding | 9 d | £5,100 | £9,000 · 15 d | Pending | on track | £61,000 | In progress | |
| Contact-centre adviser assist | Head of CS | 26 d | £19,800 | £16,000 · 20 d | Pending | +£3,800 · +6 d | £142,000 | At risk · vendor delay |
Effort, cost and return are recorded against each job as it happens. Done means the job is solved in production with its owner’s sign-off, not that a licence was bought.
We test it before you use it.
New models arrive most weeks from a handful of companies. Deciding which to use, for what, and when not to, is not a decision your employees should be making. So we make it first, in a controlled sandbox, with a dedicated research team.
Ask us to test a specific frontier model against your workload. You get a written result and, if it passes, a staged switch with a way back.
| Release | Behaviour | Stability | Cost vs current | Data | Verdict |
|---|---|---|---|---|---|
| Standard-tier model, 9 Sep | Pass | Pass · 0.4% drift | −11% | Pass | Approved |
| Premium model, 2 Sep | Pass | Fail · 6% drift | +38% | Pass | Declined |
| Small model, 11 Sep | Testing | Day 3 of 7 | −54% | Pass | In progress |
| Client request · voice model | Testing | Day 1 of 7 | Pending | Review | In progress |
Example data. Results are written up monthly in the Change Control briefing.
From businesses your size.
Is GenWA suitable for a business of 50 to 250 people with no IT department?
Yes. For this size we offer a fixed-fee audit, managed Register and Usage Insight accounts, and a small set of enforced rules, with a short monthly review. Managed Operations can run the rest if you want it. Platform pricing is set by size and confirmed in writing.
Is 7,500 pounds a lot for an AI audit?
It is an indicative fixed fee for 50 to 250 people, excluding VAT, credited in full against year one. It replaces guesswork about customer data with a measured view and a 90-day plan. There is no obligation to take the platform after the audit.
We do not have anyone to run this. What is involved?
Register and Usage Insight are managed accounts, Managed Operations runs the rest if you want it, and your part is a monthly call. Start with the health check to see what is in use. You do not need a specialist hire. We agree your monthly call and the two or three rules that matter first, then add more only if the audit shows you need them.
How can a small business find out if staff use AI on personal accounts?
Use the health check. A questionnaire, a usage-export check run locally in your browser or a visit shows which tools are used, on which accounts and with what data. First findings arrive within 48 hours. The usage-export check is processed locally in the browser, with no AI API calls, so nothing leaves your machine until you ask.
Can we buy only the audit?
Yes. There is no obligation to take the platform. If you do, the audit fee is credited in full against year one. Platform bands and discounts are to be confirmed, so we agree the price in writing first. Ask us for the written quote.
How common is unapproved AI use in smaller UK businesses?
Microsoft UK's 2025 survey found 71% of UK employees had used AI tools their employer never approved (a vendor survey), and CIPD's 2026 research found only 31% of employers have a formal AI policy. Your own audit shows what applies to you.
Find out where your AI stands. Then decide.
Under a minute, an upload, or a visit. Something for the board either way.