Your teams are already using AI. We help you find out where, decide what is acceptable, and put the governance, controls and evidence in place so you can use large language models with confidence, and show regulators and auditors that you are in control.
| Use case | Team | Status |
|---|---|---|
| Client email drafting | Marketing | APPROVED |
| Adverse media summaries | Compliance | REVIEWCONTROLS SET |
| Credit decision support | Lending | REVIEW |
| Public chatbot with client data | Finance | FLAGGEDSTOPPED |
Most organisations never formally decided to adopt large language models. Staff simply started using them to draft emails, summarise documents and speed up research. That leaves boards and compliance teams with questions they cannot yet answer: which tools are in use, what data is going into them, and who is accountable when an output is wrong.
Expectations are rising at the same time. The Australian Government's Guidance for AI Adoption sets out essential practices for safe and responsible AI. The Privacy Act 1988 applies to any personal information that goes into an AI tool, and from 10 December 2026 privacy policies must explain when substantially automated decisions significantly affect individuals. Regulated businesses must also be able to explain and evidence the decisions they make.
Our consultancy closes that gap with practical, compliance-led advice that fits the way your business actually works.
Every engagement is shaped around your business, your regulators and the way your teams actually use AI. Most follow four stages, and each one ends with something you can keep.
We map where AI and large language models are used across the business, including tools staff have adopted on their own, and what data flows into them.
You receiveAn AI use register
Each use case is risk-rated against your obligations, so effort goes where the exposure is highest: personal information, client decisions and regulated processes.
You receiveRisk-rated use cases and priorities
We build the governance framework, policies and controls you need, with clear ownership for every AI-assisted decision and a list of approved tools.
You receiveAI policy, controls and accountability matrix
We help you roll the framework out, train your people and set up the monitoring and records that let you prove it is working.
You receiveTraining, monitoring and an evidence pack
Few organisations have a complete list of the AI they use. Staff sign up for chatbots and writing assistants, AI features arrive quietly inside software you already pay for, and browser extensions read whatever is on screen. None of it shows up in a technology register until something goes wrong.
We work with your IT, procurement and business teams to build a complete picture: which tools are in use, who uses them, for what purpose and with what data. Each use is then risk-rated, so you know where to act first and where AI can safely keep saving time.
When an AI tool gets something wrong, the first question a regulator asks is who was responsible. In many organisations nobody can answer, because AI arrived through individual teams rather than through a formal decision.
We help you set accountability from the board down: who approves new AI tools, who rates the risk, who reviews high-risk outputs and who reports on how AI is being used. The result is a simple matrix everyone can follow and an escalation path for when something goes wrong.
Our advice comes from more than 25 years of building compliance and risk technology, so it is grounded in how regulated businesses really operate, not in theory.
A complete register of the AI tools and use cases in your organisation, who uses them, for what purpose and with which data. The foundation for everything else.
A consistent method for rating AI use cases by impact, so low-risk productivity tools move quickly and high-risk uses get the scrutiny they need.
An AI policy, acceptable use rules and a responsibility matrix that sets out who approves, owns and reviews each AI-assisted process.
A review of what personal and confidential information reaches AI tools, measured against the Australian Privacy Principles, with practical controls to keep sensitive data out of the wrong places.
Structured questions and checks for third-party AI and LLM providers, covering where data is stored, how models are trained, contract terms and ongoing oversight.
Independent testing of your AI controls and a clear evidence pack, so you can answer an auditor's or regulator's questions about AI with records, not reassurances.
There is no single AI law in Australia. Instead, existing laws and new guidance apply to AI in different ways, depending on your sector and how you use it. We help you work out which obligations apply to you and what they mean in practice.
Good AI governance should not be invented from scratch. We align your framework to recognised standards, so it stands up to external review and stays consistent as regulation develops.
Yes. Everyday tools are where most data leaks happen, because staff paste in client details, contracts or internal figures without realising where that information goes. A short, clear policy and a list of approved tools prevent most problems.
IT security protects your systems from attack. AI governance covers how AI is used: which tools are approved, what data can go into them, who checks the outputs and who is accountable when a decision is wrong. The two work together.
They apply to organisations covered by the Privacy Act that use computer programs to make, or substantially help make, decisions that could significantly affect individuals. From 10 December 2026, those organisations must describe these decisions in their privacy policy. We can help you work out whether and where they apply.
It depends on the size of your organisation and how widely AI is used. We agree the scope, timing and deliverables with you up front, and you receive a prioritised roadmap at the end of the assessment stage.
Yes. We can train your people, run periodic reviews of your AI use register and controls, and help you prepare for audits and regulator questions.
Talk to our team about an AI governance review, and leave with a clear picture of where you stand and what to do next.