Tier 1 · SME AI Risk Assessment Workbook
Do you actually know what risk your AI use is carrying?
Most SMEs using AI tools have no idea what data is flowing into them, whether that use is legal, or what would happen if something went wrong. This workbook gives you clear answers in two to three hours, at your own pace.
A personal data breach involving an AI tool can be reportable to the ICO within 72 hours. "We did not have a policy" is not a defence.
£49. Instant access. Complete it online, or download the Word and PDF versions.
"We only use ChatGPT for drafting."
Most businesses undercount. Staff often use tools nobody approved, and some of those tools keep what they are given.
"Our clients haven't asked about AI yet."
Supplier questionnaires and tenders are starting to. A risk register gives you a documented answer.
"We'll write a policy when we're bigger."
UK GDPR applies to you now, whatever your size. The workbook shows where you stand today.
What is inside
One afternoon. Seven modules. A risk register you own.
When you complete this workbook you have a complete inventory of every AI tool in use, a data risk map showing what is flowing into those tools, a scored risk register across five risk categories, and a 90-day action plan.
This is a document you can show a client, a regulator, or an auditor.
Complete it online: flags, totals, your risk register and your action plan build as you answer, and your progress saves in your browser. Each module stands alone, so you can work through it in more than one sitting. Prefer paper? An editable Word file and a print-ready PDF are included.
What it covers
- AI tool inventoryEvery tool in use, including the ones staff adopted without approval.
- Data risk mappingWhat data goes into each tool, and where Red flags appear.
- Governance checkWho is responsible, whether staff have rules to follow, and what happens if something goes wrong.
- Compliance checkICO fee, records of processing, data processing agreements, DPIAs, automated decisions, EU AI Act exposure and your sector rules.
- Output reviewHow AI-produced work is checked before it reaches a client.
- Scored risk registerYour risks rated across five categories.
- 90-day action planThe fixes, in order of priority.
Who this is for
Built for SMEs using AI without a rulebook
SME owners in the UK and Africa who are using AI tools in their business but have not yet formally assessed whether that use is safe, compliant, or governed. You do not need a legal background. You need to know your business and be willing to be honest about what you do not yet have in place.
You run a team of 2 to 50, and AI tools arrived before anyone wrote rules for them.
Accountants, consultants, agencies and recruiters handling client data every day.
You have been asked to "look into AI" and need a structured place to start.
What you get when you are done
What you hold at the end
- A full list of every AI tool your business uses, approved or not.
- A clear picture of what data goes into each tool.
- A scored risk register across five risk categories.
- A 90-day action plan in priority order.
- A document you can show a client, a regulator or an auditor.
The next step
Where to go from here
- Already completed the Workbook? The Policy Pack closes the gaps your risk register just flagged. Get both together for £147. See the Bundle
- Want an expert to read your register with you? See the Results Review
Do you actually know what risk your AI use is carrying?
£49
If you complete the Workbook and it does not produce a clear risk register and action plan for your business, contact us within 14 days for a full refund.