How we use AI

The short answer

We use AI tools to help us research, draft, and design our work, the same way we help clients use them: with approved tools, clear rules about data, and human review before anything is delivered. AI never makes decisions about our clients, and client information never goes into an AI tool that isn’t approved for it.

Where we use AI

Research

Finding and summarizing laws, regulations, and guidance
Comparing frameworks and standards
Checking for recent changes

Drafting

First drafts of policies, reports, and guides
Formatting and editing
Turning our notes into structured documents

Design

Building our website and resource pages
Creating diagrams and visual layouts
Producing templates and tools

Our rules

Approved tools only. We use business versions of AI tools whose terms prohibit training on our data or our clients’ data.
Client information stays protected. We don’t enter client confidential information into any AI tool unless the tool is approved for it and the client has agreed.
Human review, every time. A member of our team reviews and approves every client deliverable before it’s delivered. We check AI-assisted work against primary sources.
No AI decisions about clients. AI doesn’t decide scope, findings, risk ratings, or recommendations. Our consultants do.
Testing is our own work. In assurance testing and audits, our team designs the tests, reviews the results, and signs the assurance letter.

Our Resource Center

Our guides are drafted with the help of AI from primary sources: statutes, regulations, standards, and agency guidance. Our team reviews each industry’s legal summary every quarter and updates guides when requirements change. If you see something out of date, tell us and we’ll review it.

Questions

Clients can ask for the list of AI tools we use on their engagement at any time, and can ask us not to use AI on their work. Just tell us when we scope the engagement.