Our insurer (or a client) is asking about AI. What do we put in writing?
A short, specific, dated answer you can stand behind. It takes three things: a list of the AI tools actually in use, a one-page policy, and a dated page showing what you checked and changed.
The form is a statement your firm signs.
It usually arrives as one new section on a form you fill in every year: do you use generative AI, do you have a policy, how do you keep confidential data out of it. Ticking “yes” is tempting. If something goes wrong later, that form is the first thing anyone reads.
A truthful answer is usually within reach in a few weeks, and most of the work is useful anyway.
| The question | A weak answer | A good answer |
|---|---|---|
| Do you use generative AI? | “Yes, responsibly.” | “Yes. Approved: Microsoft 365 Copilot Chat, signed in with work accounts. Not approved: personal ChatGPT accounts for client work.” |
| Do you have a policy? | “Yes.” | “Yes, a one-page AI-use policy, adopted 3 March 2027, read and acknowledged by all staff.” |
| How do you protect confidential data? | “Staff are trained.” | “Copilot only sees what each person can already open; we reviewed and tightened file sharing on 17 February 2027.” |
What needs to be true before you sign.
Four things, each with something behind it you could produce if asked.
A list of the tools in use
Ask your staff, then check which apps have been given access to your Microsoft 365. Some won’t come up in conversation.
A one-page policy
Which tools are approved, what can and can’t go into them, who to ask about a new one, and who owns the page.
Settings that match it
If the policy says client files stay inside Microsoft 365, the sharing settings should make that true. (Microsoft Learn)
A dated before-and-after page
What was found, what was changed, and when. The page that turns “yes, we have controls” into something you can attach.
Find what’s true today, then make the answer true.
The AI Exposure Check tells you, in writing, which AI tools are in use and what they can see. The AI Guardrails set-up month then produces the policy, the settings and the dated before-and-after page, and one page a month shows it’s still true at the next renewal.
- $750
- Up to 25 staff
- $1,200
- 26–50 staff
- Two weeks, read-only, in writing
- Credited in full against the set-up within 90 days
- If I can't show you at least three specific things worth fixing (a named file, setting or tool), you don't pay.
Rather read first?
All of it is free, with no email asked.
The free checklist
The section on the one-page policy’s headings, and every setting behind the answers.
AI Guardrails
The set-up month and the monthly check, with what each one produces.
The longer guide
Weak answers beside good ones, and what not to write.
Questions owners ask.
Yours isn't here? Email me and you get a written answer by the next business day.
Will a good answer bring our insurance cost down?
I can’t promise that, and nobody can. A specific, dated answer may help the conversation with your insurer. The price is theirs to set.
Can you fill in the form for us?
The answers have to be yours, because your firm signs them. What I give you is what sits behind each one: the list of tools, the policy and the dated page, so every line has something you could produce if asked.
Our renewal is soon. How long does this take?
The Check is two weeks, and the set-up is three to four weeks after that. If your date is close, say so on the call and I’ll tell you honestly what can be true by then.
Start with 20 minutes.
No slides, no demo. I'll tell you whether I can help, and what the Check would cost for a firm your size.
DanielI do the work, and I'm who answers.
What happens after you book
- Pick a timeA 20-minute slot, straight from the calendar.
- We talkNo slides, no demo. I’ll tell you whether I can help, and what the Check would cost for a firm your size.
- If it fits, the CheckTwo weeks, read-only, in writing. The price is fixed before any work starts.