Fixed-fee sprint

Shadow AI Governance Quick-Start

Find out which AI tools your team already uses, then make that safe.

The problem

Your lawyers are already using AI. Some of it you approved. Some of it you have not seen, and it is running against client and company material on personal accounts. The gap is not appetite, it is a policy nobody wrote and a list nobody keeps.

The evidence

  • 27%

    admit to using unauthorized AI tools.

    Thomson Reuters Legal Department Operations Report, 2026

  • 56%

    of corporate lawyers use AI multiple times a day.

    Thomson Reuters Legal Department Operations Report, 2026

What you get

  • Inventory of AI tools in use across the department, including personal-account use
  • One-page acceptable-use policy written for lawyers, not for a security review
  • Approved-tool list with the review path for adding to it
  • Human-review requirements by task type
  • Rollout note and a 15-minute briefing deck for the team

How it works

  1. WEEK 1

    Evidence

    Short survey, a look at what the tenant and expense data already show, and four interviews. We record what is used, for what, and on whose account.

  2. WEEK 2

    Design and hand over

    Draft the policy and approved list, agree human-review rules by task type, walk the team through it, and leave you the register to maintain.

Every engagement leaves an instrument behind. Here it is: A tool register and policy your team maintains without us.

What it costs

Fixed fee

2 weeks

Sprint fees are confirmed in writing when we scope the work, usually within one business day of your note.

What it does not include

This is not a security assessment of the vendors on your list, and it is not a contract review. We will tell you where a tool needs a DPA or a security review, but running that review, negotiating the paper and deploying enforcement tooling sit outside a two-week sprint.

What it typically leads to

  • Program

    Operating Model & Transformation

    Fix how the work is staffed, routed and measured — not just the tools.

    Read more →

  • Program

    AI Build — pilot to production

    One use case, built and put into production, with evidence it works.

    Read more →
Scope this sprint →
Start here

Start with one sprint

Two to three weeks, one approver, a deliverable you keep. Tell us the problem and we'll come back within one business day with a scope, a date and a fee.

Scope a sprint →