| Engagement | Cost | Turnaround | The artefact you file | Best for |
|---|---|---|---|---|
| AML file review | $3,700 – $4,500 | 5–10 working days | Independent review report + board summary | Firms of 5–50 fee earners |
| DPIA & AI policy pack | $1,200 – $1,500 | 5–7 days | DPIAs, acceptable-use policy, staff guide | Any firm with AI in use |
| Review + policy refresh + training | $7,000 – $8,500 | 2–3 weeks | Report + rewritten policy + training record | Firms fixing, not just finding |
| AI governance gap analysis | $4,500 – $6,000 | 6–18 days | Scored gap analysis, AI register, roadmap | Deployers & AI vendors |
| AI readiness assessment | $3,000 – $4,000 | 10 working days | Register, feasibility, 90-day plan | Firms deciding what to buy |
| Private AI pilot | $12,000 – $18,000 | 4–6 weeks | Evaluation report with go / no-go | Confidential client bases |
| AI training | $2,300 – $2,900 | Within 2–4 weeks | Training record and competency checklist | Every firm using AI |
| AI audit | $3,000 – $4,000 | ~2 weeks each | Findings, ratings, remediation plan | Firms wanting assurance |
| AML annual cover | $650 – $1,150 / month | Quarterly cycle | Quarterly evidence that the file stays clean | Post-review cover |
| AI governance retainer | $1,250 – $2,500 / month | Continuous | Register upkeep + new-tool assessments | Firms whose AI use changes |
AML, data protection and AI governance.
What regulation 21 and UK GDPR expect, delivered as documents you can file — and independence you can evidence rather than assert.
AML file review
Twenty files, seven control areas, a named former MLCO signing every finding. The independent audit regulation 21 expects and most firms postpone.
DPIA & AI policy pack
A completed DPIA per AI tool in use, an acceptable-use policy fee-earners will read, a vendor questionnaire and a staff one-pager. One week, fixed.
Review, policy refresh & training
The review plus an AML policy rewritten against what we found, plus live training using patterns from your own files. One decision, one fee.
AI governance & 42001 readiness
Scored gap analysis against Annex A, a complete AI system register, risk assessment and a roadmap with effort and cost per step. We prepare; accredited bodies certify.
Insurer asked about AML and AI?
The pack that answers a professional indemnity questionnaire with documents rather than assurances — built once, refreshed annually.
Annual cover
Quarterly AML spot checks and a kept-current AI register, so the answer to any questionnaire is a document from this quarter.
Private AI, training and audit.
The work that follows once you accept that public tools solve the drafting problem and create a confidentiality one. Read the practice page for the full reasoning.
Private AI deployment
Models inside your perimeter, retrieval over your own precedents with permissions inherited from the DMS, and an evaluation record built on your matters. Readiness, pilot, deployment and managed cover.
AI training
Four sessions for users, supervisors and the compliance desk, built from findings in our own reviews. Leaves a training record you can put in the insurer file.
AI audit
Shadow-AI discovery, output quality testing and an annual governance audit — the independent check on your AI control environment, mirroring what you do for AML.
Vendor diligence pack
For companies selling AI into law firms: the security, governance and evidential answers their procurement teams ask for, in their language.
Private AI in law — 2026 guide
Three deployment archetypes, real running costs, retrieval that respects ethical walls, evaluation on your own matters, and a 90-day rollout plan.
The AI tools index
Independent, unpaid reviews of the legal AI tools firms actually use, scored on data posture, privilege, evidential transparency and commercial reality.
No procurement theatre.
Free 3-file check, or a fixed-fee policy pack
Either find out whether you have a problem, or fix the AI documentation gap. Both are cheap, fast and useful even if you never engage us again.
A fixed number, in writing
Scope, deliverable, turnaround, fee and payment terms — one page, the same day you ask. Nothing starts until you approve it.
Card or invoice
Stripe checkout for speed; invoice with bank transfer for anything purchase-order shaped. 50/50 on most engagements.
Everything is filable
Independence statements, DPIAs, registers, training records — written so that an insurer, a client or a regulator can accept them without translation.
Conflict check first
We do not review a firm we have advised, we never certify, and we take no vendor payments of any kind.
Send three files.
We'll tell you what a reviewer would flag.
- No charge and no obligation — you keep the findings either way
- Turned around in ~48 hours, encrypted transfer only
- Most firms find at least one issue they did not know they had