AI readiness · governance · policy

AI strategy consulting for SMEs.

We create a clear AI inventory, practical rules and a prioritised 90-day plan—before more tools and pilots consume your budget.

20 minutes · no obligation · organisational review, not legal advice

72%cite a lack of knowledge as a barrier, despite having considered AI
Where the problem lies

The idea is not missing. What is missing is clarity and a safe way forward.

Destatis figures for 2025 show that, in addition to a lack of knowledge, 62% cite unclear legal consequences, 60% data protection concerns, 45% incompatible systems and 44% insufficient data. An AI readiness assessment turns these barriers into concrete decisions for your business.

Source: German Federal Statistical Office, reasons for not using AI, 2025. Multiple answers were possible; the respondents were businesses that had considered AI but did not yet use it.

From unmanaged growth to a clear decision

What you receive after the AI readiness assessment.

No generic strategy deck. You receive a documented baseline, clear rules and an initial use case with a value hypothesis, accountable owner and stop criterion.

01 · Visibility

AI inventory and data flows

Tools in use, planned applications, data types, providers and existing approvals become visible.

02 · Control

Policy, roles and evidence

Who may use what? Who reviews exceptions? Which use must be documented or supported by training?

03 · Focus

90-day plan with go and stop decisions

Use cases are ranked by value, data readiness, effort and risk. Only the strongest pilot starts.

How we solve it

From “We should do something with AI” to a controlled pilot.

We separate organisational, technical and legal questions clearly. Avolang establishes the basis for decisions and implementation; binding legal review remains with your legal advisers or data protection team.

01

Inventory

Record tools, data, user groups and planned use cases.

02

Readiness

Assess value, data quality, systems, costs and risks.

03

Governance

Draft policy, approvals, roles and documentation.

04

Pilot

Define one use case, metrics, exceptions and human oversight.

05

Decision

After 90 days, roll out, adapt or deliberately stop.

Turning policy into daily practice

Rules your employees can actually apply.

  • InventoryTools, accountable owners, providers, data types and purposes
  • PolicyPermitted, review-required and prohibited use in plain language
  • ApprovalResponsibilities, escalation, human oversight and change process
  • TrainingPractical exercises using real tasks, data rules and documented AI literacy
  • RoadmapPrioritised use cases, prerequisites, target metrics and 90-day steps
How we measure a controlled rollout

Control must be visible.

The rollout is not complete when a document has been filed away. It works when use, responsibility and decisions are traceable in day-to-day operations.

Inventory coverageKnown tools and use cases within the defined scope.
Clear ownershipShare of cases with a named owner and approval route.
Trained usersParticipation and understanding of specific rules.
Documented exceptionsDeviations, decisions and corrections.
Pilot targetValue, quality, cost and risk defined in advance.
Go/stop decisionRecorded clearly after 90 days.

Avolang does not replace legal advice and does not certify legal compliance. We create the organisational and technical foundation for your specialist and legal review.

Real search queries. Direct answers.

What businesses need to clarify before adopting AI.

What is an AI readiness assessment?

It assesses whether the business value, data, systems, skills, costs and controls are sufficient for a specific AI use case. The result is a prioritised decision list, not just a maturity score.

Why does a business need an AI policy?

It clearly sets out which tools and data are permitted, when approval is required and who decides when errors occur or new applications are proposed. A template is only a starting point; the rules must fit your processes.

How can a business ensure its AI systems comply with the EU AI Act?

Start with a complete inventory, defined roles, risk classification, documentation, training and a process for changes. The specific legal assessment must be carried out by qualified legal or data protection advisers.

Does the GDPR apply when using AI?

Yes, whenever personal data is processed. Purpose, legal basis, data minimisation, service providers, deletion, data subject rights and safeguards must be reviewed. Avolang prepares the data flows and technical facts needed for that review.

How much does an AI readiness assessment cost?

The scope depends on the number of departments, tools and interviews involved. We define the scope in a free fit check, then provide a tailored proposal with clear deliverables and terms.

First step

Before the next tool arrives: let us create clarity.

In a free fit check, we assess your current situation and tell you plainly whether a readiness assessment, policy, training or a specific pilot is the right next step.

Assess your AI readiness →
20 minutes · freeAssess readiness →