AI policy and governance for small organisations
Give staff clear rules about which AI tools they can use, what information they can enter and who approves the result. Build a short policy people can use, backed by training and accountable owners.
All prices shown are final. AI Vision Consulting is not currently VAT registered, so no VAT is added.
Start with what people are actually doing
A useful policy reflects the tools, tasks and information in your organisation. We review current practice with you, identify the decisions that need an owner and explain the rules in everyday language.
This package suits smaller businesses, charities and small public bodies that need an agreed starting point for responsible AI use. Formal certification and specialist legal advice are separate services.
Why a practical starting point matters
In February 2026, the UK government confirmed it would not publish the proposed AI Management Essentials tool or make it a government procurement requirement. A small organisation still needs to decide its own rules, responsibilities and review process.
For organisations within the scope of the EU AI Act, AI literacy duties remain relevant. Current European Commission guidance reflects amendments made in July 2026 and no longer describes a mandated sufficient level. We help record practical training and decisions; your legal adviser should confirm which obligations apply to your organisation.
What you get
We agree the scope before work starts and assemble a practical pack your staff and managers can use.
- An AI use policy, typically three to four pages, in plain English
- A tool inventory recording owners, users, data entered and whether provider terms allow training on that data
- A staff data note explaining what can and cannot be entered into each tool
- A risk register distinguishing identified risks, agreed mitigations and explicitly accepted risks
- Role-based AI literacy training with a record of participation and material covered
- A sign-off route for new tools, policy reviews and unresolved questions
How it works
We start with a discovery conversation, review your existing practices and prepare a draft for comment. We then deliver the agreed training session and finalise the pack with named owners and review dates.
A typical engagement takes three to four weeks, depending on access to the relevant people and feedback.
Price and scope
From £1,750. Once the scope is agreed, we provide a fixed fee for the package. Larger or multi-site organisations, ISO 42001 alignment and work involving EU AI Act obligations are quoted individually. No VAT added.
This is practical governance support, not certification, a legal opinion or a guarantee of compliance. Your organisation remains responsible for approving the policy, implementing controls and obtaining specialist advice where needed. Travel outside Tyne and Wear and any software licences are quoted separately.
Frequently asked questions
Do small businesses need an AI policy?
If staff use AI for work, an agreed policy can clarify approved tools, permitted data, review duties and accountability. The necessary controls depend on your organisation and use cases; this package is scoped around those facts.
What does an AI policy package cost?
The package starts at £1,750. We agree a fixed fee after discovery. Larger organisations and specialist regulatory or certification-alignment work need an individual quote. No VAT added.
Does this include certification?
No. You receive a policy, supporting registers, staff guidance, role-based training and a sign-off process. This is not ISO certification or a guarantee of legal compliance.