Be ready to switch AI on, safely.

Before you widen AI across your business, you need to know your data is in order, your people know the rules, and you can show your board, your insurers and your customers that you have done your due diligence. AI Foundations puts that in place for a small or medium-sized business, so you can move with confidence instead of crossing your fingers.

AI Foundations:
The groundwork that makes AI safe to use.

group-of-people-2145.png

Staff are already using AI

Your people are very likely pasting company information into free AI tools like ChatGPT today. AI Foundations sets clear rules for what can go where, so that everyday use stops being a quiet exposure.

org-chart-hierarchy-2325.png

Nobody owns the risk

Without a policy, a tool register and a named route for incidents, AI risk sits with no one until something goes wrong. We give it an owner and a paper trail.

document-pen-edit-2425.png

You cannot prove you are in control

Buyers, insurers and regulators are starting to ask how you govern AI. AI Foundations gives you the evidence to answer them before they think to ask.

Each of these is groundwork, and groundwork is exactly what we do before anyone builds.

31%
of UK employers have a formal AI policy (CIPD)

62%
of staff already use AI tools nobody approved

1 in 3
of AI users get clear professional guidance at work (Google, UK research)

A complete, plain-language base for responsible AI.

We work to ISO 42001, the international standard for responsible artificial intelligence, so everything we set up is built to count towards certification later if you choose to go there. It also sits naturally alongside our IT compliance and risk management service, extending the same controls-and-evidence discipline to AI.

  • A responsible AI policy written for your business, in language your team will read.
  • Data classification: simple traffic-light tiers that tell everyone what may go into which tool.
  • An approved tool register and a risk register, so AI use is recorded and reviewed.
  • A clear incident route, so people know what to do the moment something looks wrong.
  • A staff briefing and policy sign-off, so the rules are understood, not just written.
  • Your own governance portal, where the policy, the registers and the evidence live.

We do not call it safe until it is.

Mark, Ollie and Claire of EPX IT talking around a meeting table

Alongside the core setup we scope any make-safe work your assessment turns up: tidying data stores, correcting permissions, closing the gaps that would make wider AI risky, the same ground our cyber security and threat protection service works every day. The scope and the cap are agreed before any work starts, and you choose who does it, our team, yours, or both. One rule holds the promise honest: widening AI beyond your first users waits until that make-safe work is done. That is the point of Foundations, not the small print.

 

Every step counts towards what comes next.

AI Foundations is designed so that each artefact, the policy, the registers, the evidence, is a finished input to ISO 42001 alignment. If you go further, you build on this; you do not redo it. The natural next steps are Microsoft Copilot, done safely, and AI Assured to keep it that way.

The EPX IT pyramid: AI Foundations (policy, people, data and security, governance) as the base, building up through Copilot Launch, AI Assured and pilots to ISO 42001

Common questions

Start with a conversation, not a contract.

Book a free AI Discovery Call. We will show you where your quick wins are, what to address first, and how AI Foundations would set you up to switch AI on safely. There is no obligation to go further.

Dave Coleman, EPX IT's AI leadBook a meeting with our AI leadDave Coleman, EPX IT's AI leadContact us

Keep exploring the AI hub.

computer-brain-3785.png

The AI hub home

Putting AI to work in your business, safely

question-marks.png

Where do you stand?

Take the free two-minute AI readiness quiz

rocket-3475.png

Microsoft Copilot

Set up properly and actually used

lightbulb-idea-2415.png

Prompts and use cases

Ready-to-use Copilot prompts for real jobs

magnifying-glass-search-3725.png

AI Assured

Monthly monitoring for shadow AI and oversharing

scales-of-justice-2235.png

Regulated industries

AI for law firms, accountants and healthcare

coin-stack-with-clock-2895.png

How we use AI ourselves

Nearly 90 hours a month back, measured on our own business