Consulting · AI adoption
The rule first, then the tool.
AI is already in your business, usually uncontrolled through private accounts. We settle where it pays off, which data may go into it, and which duties come attached.
The usual state: AI is here, nobody knows about it
In most businesses the question is no longer whether AI is used. It is used, just unnoticed: someone has a customer email drafted, someone else drops a price list into a chat window to turn it into a table. That happens without ill intent and without a rule.
The risk grows out of exactly that, in two places. First, data leaves the business without anyone having decided which data may. Second, people rely on results whose derivation they cannot check.
The answer is rarely a ban. A ban pushes usage into private accounts and makes it invisible. The answer is a short, clear rule on who may put which data into which tool, plus a set of use cases where the benefit is demonstrable.
On top comes the regulatory classification. The EU AI Act sorts by risk: most of what an ordinary business does sits in the lowest tier with no special duties. Once AI answers customers, a transparency duty applies. Once it screens job applications, you are in the high-risk tier. We do that classification for your specific applications.
The result is a short internal rule, a list of suitable use cases with effort and benefit, and the classification of your applications by risk tier. Not a binder, but something that gets used day to day.
What happens during the consulting days
- Survey of actual usage
- Which tools are already used, by whom, with what data. Without blame, otherwise you will not find out.
- Assess use cases
- We work through your processes and assess where AI demonstrably saves time and where it only shifts effort. Rated by recurring time spent, tolerance for error and how checkable the output is.
- Set the guardrails
- Who may put which data into which tool, where a human stays in the loop, what gets documented. One page, not thirty.
- Regulatory classification
- Mapping your applications to the risk tiers of the EU AI Act, with the resulting duties, in particular transparency in customer contact and the AI literacy requirements for staff.
How the engagement runs
- Initial call, free of charge, about 30 minutes We check whether there is a specific trigger, such as a planned application or a requirement from a customer relationship.
- Day 1: survey and use cases Conversations with the areas where AI is used today or could be. The output is a raw list of use cases.
- Analysis between the on-site days Assessing the use cases, drafting the guardrails, mapping to risk tiers. This time is not billed as a consulting day.
- Day 2: agreement We go through rule and use cases with you and the team. A rule nobody knows has no effect.
- Report and handover Survey, assessed use cases, internal rule and classification by risk tier with the resulting duties.
What you hold at the end
- Internal AI rule on one page
- Who may put which data into which tool, where a human decides, what is logged. Ready to post on the wall and to use in onboarding.
- Assessed use cases
- With an estimate of time saved, effort, risk and checkability, sorted by what to tackle first.
- Classification by risk tier
- Your applications mapped to the tiers of the EU AI Act, with the resulting duties and what is explicitly not required.
- Overview of tools in use
- What is actually used in the business, with place of processing and a note where an Article 28 GDPR agreement is needed.
What is not part of this engagement
- No development and no setup
- Building assistants, integrations or automations is a separate service with its own quote.
- No legal advice
- The classification by risk tier is a professional assessment. Binding legal advice, particularly in the high-risk tier, belongs to a lawyer.
- No data protection impact assessment
- Where an assessment might be required, we say so. Carrying it out is a separate undertaking.
- No tool procurement
- Licences and subscriptions are not part of the consulting fee. Cost ranges appear in the report; buying happens separately.
Effort and price
Usually two consulting days
Survey, use cases and guardrails fit into two days. Where AI plays a part in recruitment or lending, meaning the high-risk tier, a third day is needed for the classification. 1,250 euro per consulting day of eight hours, plus VAT, travel and, where required, accommodation.
1,250 euro per consulting day of 8 hours, plus VAT, travel and, where required, accommodation.
What that means in figures
| Consulting days | Fee, net |
|---|---|
| 1 | 1,250 euro |
| 2 | 2,500 euro |
| 3 | 3,750 euro |
| 4 | 5,000 euro |
| 5 | 6,250 euro |
1,250 euro per consulting day of 8 hours, plus VAT, travel and, where required, accommodation.
AI adoption: Frequently asked
What does the AI engagement cost?
1,250 euro per consulting day of eight hours, plus VAT, travel and accommodation where required. Two days is typical, so 2,500 euro net.
Does the EU AI Act apply to us at all?
By use case, not by company size. Using AI for drafting and research sits in the lowest tier with no special duties. If AI answers customers, a transparency duty applies. If it screens applications, you are in the high-risk tier with substantial requirements.
Should we ban AI in the business?
Rarely sensible. A ban moves usage into private accounts and makes it invisible; the risk stays and the control is gone. A short rule on which data may go into which tool, plus one or two approved tools, works better.
May customer data go into an AI tool?
That depends on the tool, the place of processing and the agreement. Every service in use needs the usual review including an Article 28 GDPR agreement. Where there is no basis, the category of data belongs on the exclusion list in the internal rule.
What does AI literacy under Article 4 EU AI Act mean in practice?
No certificates. It means the people using AI at work understand what the tool can do, where it gets things wrong and which data must not go into it. A documented briefing plus the internal rule covers it for a small business.
Can you also build the recommended applications?
Yes, but as a separate engagement with its own quote. The consulting ends with the report, and its recommendations are written so you can hand them to any other provider.
Talk it through first
A 30-minute call clarifies whether an engagement is the right instrument. If it is not, we say so there.
Last reviewed: