Know your AI risk before it becomes a liability.
A structured 4-week engagement that audits your AI exposure, maps where sensitive data flows, and produces a board-ready remediation roadmap. Fixed fee. No ongoing obligation.
When organisations commission a Discovery
These are the four situations that most commonly trigger a Discovery & Assessment engagement.
"Our board has asked about AI governance. We have no formal answer."
"We suspect employees are using personal AI accounts with client data."
"An insurer or enterprise client has asked us to demonstrate GDPR compliance for AI."
"We're evaluating responsible AI adoption and don't know where the risks are."
What you receive
Five concrete deliverables. All written by Setient consultants with direct knowledge of your environment.
AI Usage Inventory
A complete map of every AI tool in use across your organisation — licensed, free-tier, and shadow usage. Includes model names, providers, data types in use, and account ownership.
Data Flow Map with PII Exposure Analysis
A technical diagram of how data moves between your teams and cloud AI providers, annotated with categories of personal and sensitive data at each flow point.
Regulatory Gap Analysis
A structured assessment of your current posture against applicable regulations — UK GDPR / ICO, India DPDP Act 2023, RBI Digital Lending Guidelines, HIPAA, or sector-specific frameworks as relevant.
Prioritised Remediation Roadmap
A ranked action plan: what to fix immediately, what to fix within 90 days, and what requires longer-term structural change. Each item includes effort estimate and recommended Setient product or mitigation.
Executive Briefing Deck
A board-ready presentation summarising findings, risk ratings, and recommended actions — formatted for a non-technical audience. Suitable for audit committees, insurers, and enterprise client due diligence.
How four weeks unfolds
A structured methodology — the same process regardless of organisation size or sector.
Kickoff & AI Inventory
- Introductory call with your IT, compliance, and business leads
- Distribution of AI usage survey to staff and team leads
- Review of existing IT asset register and cloud billing accounts
- Identification of all AI providers and API keys in use
Technical Audit & Data Flow Mapping
- Structured interviews with technical leads (2–3 sessions, 1 hour each)
- Review of network diagrams, data classification policies, and existing DPIAs
- Manual and automated discovery of cloud AI integrations
- Initial PII exposure mapping across identified flows
Regulatory Analysis & Risk Scoring
- Mapping of data flows against applicable regulatory requirements
- Risk scoring of each identified gap (impact × likelihood)
- Draft remediation roadmap and prioritisation discussion with your team
- Internal review with Setient legal and compliance advisors
Report Preparation & Executive Briefing
- Final report compilation and quality review
- Pre-read circulated to your team 48 hours in advance
- Executive briefing session (90 minutes, remote or on-site)
- Q&A and recommended next steps walkthrough
Who is involved
Setient deploys a small, senior team. Client involvement is light by design — typically 3–5 hours per week.
Setient team
Primary client contact, report author, executive briefing lead
AI tool discovery, technical audit, data flow mapping
Regulatory gap analysis, sign-off on legal interpretation
Client team
Technical interviews, system access, API key inventory
Regulatory context, existing policies, DPIA review
Kickoff and executive briefing attendance
Pricing
- Single invoice at engagement start
- No ongoing obligation after delivery
- Expenses (travel for on-site sessions) billed at cost
- Remote-first by default — on-site available at no premium for UK clients
After the Discovery
Most clients use the Discovery roadmap to proceed to Implementation. There is no obligation — the report is yours to act on with any provider or in-house team.
Ready to understand your AI risk?
The initial conversation is free and takes 30 minutes. We'll tell you whether a Discovery is the right starting point and what it will cover for your organisation.