Four steps. At each one, you know what's happening, what it costs and what you'll get.
01
Free scoping call
Thirty minutes on your data, your AI use and what a first assessment would look like. No obligation.
02
Assessment
For every control we ask two questions: are you doing it, and how well? If you can't show evidence, the score can't go above a set level. Every score explains how we reached it.
03
Your report pack
Four clear documents, signed off by a qualified person, so you know where you stand and what to do next.
04
Fix, then stay in control
We help you close the gaps, most urgent first, then keep checking in so they stay closed.
How we score maturity
Level 3 is the line between describing a control and proving it.
1
Unsupported
Nothing in place yet.
2
Asserted
You say it happens, but there's no proof.
3
Evidenced
You can show it happens.
4
Measured
You track how well it works.
5
Sustained
It keeps working, and keeps improving.
Who it's for
Built for the people who have to answer for it
When a client, regulator, board or governor asks, you'll have a straight answer and the evidence to back it.
We build our own products to the same standard we assess others against: visible scores, cited answers and full audit trails.
Live · Free
TrueViQ
Families preparing for the 11+
Free 11+ exam preparation you can trust.
Thousands of practice questions across Maths, English, Verbal and Non-Verbal Reasoning, with a visible quality score on every question and explanations that show the working.
One approved way for staff to use AI. Every request is checked, every answer is cited and everything is recorded, so staff don't need personal accounts the school can't see.
We’d rather tell you we’re 80% sure and show you why, than claim 99% and hide the working. It’s how we assess others, and how we build our own products.
You can always see how a conclusion was reached. No black boxes.
Explainability
We explain things in words you would use yourself, not jargon.
Trust
Earned through evidence, never simply claimed.
Usability
If people can't use it day to day, it doesn't count.
Questions
Straight answers
The things people usually ask us first. If your question isn’t here, just ask.
It means knowing which AI tools your organisation uses and what they do with your data, and having simple rules, with proof, that they're used safely and fairly. It's the difference between hoping AI is used well and being able to show it.
Data governance is about the information itself: what you hold, why, who can see it and how it is protected. AI governance is about the tools that use that information. They overlap, because AI is only as trustworthy as the data it is fed, which is why we offer both.
If you hold personal data or your staff use AI tools, you already have obligations under UK GDPR. Smaller organisations often gain the most: a handful of clear controls goes a long way, and it reassures clients, investors and partners.
UK and EU GDPR and ICO guidance for data; ISO/IEC 42001, the NIST AI Risk Management Framework and the EU AI Act for AI. We map findings to whichever matter to you. We're not a certification body. We help you get ready and give you the evidence to show for it.
For each control we ask two questions: are you doing it, and how well and how consistently? Maturity is scored from 1 (unsupported) to 5 (sustained). If you can't show evidence, the score can't go above a set level. Every score explains how we reached it. A qualified person signs off the findings.
Four documents: a report showing where you stand, an action plan of what to fix first, a risk register with owners, and an audit-ready evidence pack.
No. An assessment tells you where you stand; the value comes from what happens next. We help you close the gaps in priority order, then keep an eye on things: checking your controls still work, spotting new AI tools early and keeping your evidence up to date.
Nothing. The scoping call is free, takes 30 minutes, and there is no obligation. You will leave with a clearer picture of where you stand either way.
Done well, it does the opposite. Clear rules mean people stop second-guessing which tools they can use, and you can say yes to new AI ideas faster because the guardrails are already in place.
They are our own products, built to the same standard we assess others against: transparent scoring, cited answers and full audit trails. If we ask it of you, we do it ourselves first.
A Data Protection Impact Assessment is a structured look at the risks a project poses to people's personal data, and how you'll reduce them. UK GDPR requires one before processing that's likely to be high risk, such as large-scale use of sensitive data or new technology like AI. If you're not sure whether you need one, we can tell you on the scoping call.
Not quite. A DPIA looks at the risks to personal data. An AI risk assessment also covers accuracy, bias, transparency and how much people rely on the output. When an AI tool uses personal data you often need both, and we can do them together.
Not sure where you stand? Let’s find out in 30 minutes.
A free, no-obligation call about your data and your AI use. You’ll leave with a clearer picture either way.