AI Policy Pack

Overview

The AI Policy Pack gives a professional services firm the policies, registers and risk framework it needs to use AI without compromising client confidentiality or privilege. It is sized to your firm, not copied from a template, and starts at $8,500 + GST.

"Mike took the time to understand our practice and built an AI governance framework sized for a small firm. We can now use AI without compromising confidentiality or privilege." - Director, boutique investigations firm, Sydney

What's included

1. Workshops with your leadership on risk appetite and data classification
2. A risk appetite statement
3. A policy pack: AI acceptable use, information security, IT acceptable use, data classification and handling, data retention and deletion, access management, third-party management, incident response, backup and secure development
4. A risk register
5. A third-party and AI use register

How it works

1. Workshops - set your risk appetite and how your data is classified
2. Drafting - we write the policies between sessions, fitted to how your firm works
3. Acceptance - you review and accept them in your own time
4. Handover - registers set up so you can run them yourselves

Pricing

• Essentials - $8,500 + GST. Under about 10 staff, one jurisdiction, light regulation.
• Standard - $12,500 + GST. About 10-75 staff, handling client or personal data at scale.
• Complex - quoted. Several jurisdictions, certification ahead, or more than 75 staff.

Standards

The pack is aligned with ISO/IEC 27001 and ISO/IEC 42001. Certification-grade documentation is available on request.

Common questions

Why not just use an AI policy template?

A template gives you words. The pack gives you policies that match how your firm actually handles client data and who can approve what, plus registers you will keep using.

Who is it for?

Law firms, accountants, investigators and other professional services firms that hold client or personal data.

What happens after the pack?

Many firms keep Vantg on as their appointed AI and security adviser through Executive Advisory, providing the oversight needed to maintain the safe boundaries.