6 August 2025
Sector: Financial services
Focus: Consulting, AI Strategy & Implementation
Situation
People were already using consumer tools with sensitive material, legal wanted hard stops, and product teams still needed to ship. A ban-without-alternatives approach was not going to hold.
What we focused on
- Risk tiers: What could never go to external models vs what could with controls.
- Pilot design: Success metrics and kill criteria before anyone bought licences at scale.
- Documentation: Lightweight enough to use; explicit enough for auditors.
Outcome
Sanctioned experiments and fewer shadow workflows, without a 200-page policy nobody followed.