Why now
In May 2026, Anthropic and OpenAI each launched a company that sends engineers into businesses to put AI to work. Anthropic aims its company at mid-sized firms that lack the in-house resources to do it themselves. OpenAI says real impact comes from helping people use AI safely, effectively and at scale.
The value follows the groundwork. In 2025, BCG found that just 5% of companies got substantial value from AI. In 2026 nearly half did, and the leaders invest in governance and their workforce alongside the technology. Where the rules are missing, it costs: of the organisations that reported a breach of an AI model or app, 97% had no AI access controls in place.
A chatbot is not ready for work out of the box. Like any business software, it needs set-up, your own context and data, trained users and rules for the whole organisation. The same laws apply as to every other tool: the GDPR, the AI Act and your sector’s security rules, however many people use it every day. The Dutch data protection authority warns that personal data put into an AI chatbot can lead to a data breach.
The good news: it is not hard, only complex. Our packages do that groundwork at a fixed price. AI Business School is independent of every AI assistant vendor.
Training changes what people know. These 4 packages write down the rules, the tool list and the routines with your team, on your data, and each one pairs with a course.
Every package starts with a 30-minute scoping call and ends with documents your company owns.
Which package fits
| Your situation | Start with |
|---|---|
| No AI rules yet, up to 100 people, no legal or IT department | 1. AI starter package |
| Staff use AI tools you do not know about | 2. Shadow AI assessment |
| You know the tools and need the written policy and who decides | 3. AI policy and approved tool list |
| Rules are in place and you want measured time savings | 4. Adoption programme |
| You only need your staff trained | A course, no package |
AI starter package
Which AI tools do your people use, with which data, and what are the rules from now on?
- Duration
- 2 weeks.
- Price
- from €5,000 excl. VAT.
- Pairs with
- AI Basics at Work for all staff, run once the rules are in place.
Details: scope and deliverables
For companies of 10 to 100 people without their own legal or IT department.
Scope
- An anonymous 10-minute staff survey on AI tools and tasks.
- A 1-hour interview with the owner or managing director, and 1 hour with your IT supplier or whoever manages your accounts and devices.
- A check of each AI tool in use: which client, staff and company data it may see, and whether a business account with your data settings exists.
Deliverables
- A 2-page AI use policy, written for your company.
- Approved tool list with the data rule for each tool.
- One-page AI use card for staff.
- Training record template for your AI literacy file under Article 4 of the AI Act.
The policy follows our standard structure, filled in from your answers. Decision rights for new tools, a policy written around your existing policies, network log checks, interviews in every department and a works council review are part of packages 2 and 3.
Shadow AI assessment
Which AI tools are staff using today, for which tasks, with which data?
- Duration
- 2 to 3 weeks, depending on size.
- Price
- from €5,000 excl. VAT.
- Pairs with
- Shadow AI and Safe AI Use, run for staff once the findings are in.
Details: scope and deliverables
Scope
- An anonymous staff survey on AI tools and tasks.
- 6 to 10 short interviews across departments.
- A count of traffic to each AI service in your network logs. Your IT team or IT supplier runs the extract and shares totals per tool only, with no data on individual staff.
- Before the log step starts, you check with your privacy contact whether a DPIA is needed and, if you have a works council, whether it must consent. We supply a written description of the processing for both.
- A check of your current policies against what staff actually do.
Deliverables
- A findings report: tools in use, data at risk, tasks people rely on.
- A risk-ranked list of the 10 most pressing issues, each with a fix.
- A recommendation on which tools to approve, restrict or replace.
In December 2025 the municipality of Eindhoven reported that staff had uploaded files with personal data of residents and staff to public AI websites, and that the total could not be established. (Binnenlands Bestuur, Dec 2025) An assessment looks for this exposure before it becomes an incident.
AI policy and approved tool list
What are staff allowed to do with AI, in which tool, with which data, and who decides?
- Duration
- 2 to 4 weeks.
- Price
- from €5,000 excl. VAT.
- Pairs with
- Leading AI Adoption: Governance, Policy and Culture for the people who will own the policy, and AI Literacy and the AI Act for everyone else.
Details: scope and deliverables
Scope
- A draft AI use policy written on your organisation’s data, roles and existing policies.
- Data rules per tool: which information may go where.
- Decision rights: who approves a new tool or a new use case.
- A record format for your AI literacy measures under Article 4 of the AI Act.
Deliverables
- AI use policy, ready for review by your legal adviser and, if you have one, your works council.
- Approved tool list with the data rule for each tool. This package owns the final list: the drafts made in Shadow AI and Safe AI Use and in Leading AI Adoption feed into it, and so does the list from the AI starter package if you took it.
- One-page AI use card for staff.
- Training record template.
The Dutch data protection authority advises organisations to agree clearly with staff which data may and may not be entered into AI chatbots. (AP, Aug 2024) This package writes those agreements down.
Adoption programme
Where does AI save real time in this team, and how do we know?
- Duration
- 8 to 12 weeks.
- Price
- from €5,000 excl. VAT.
- Pairs with
- AI for Daily Work: Prompts, Assistants and Automations for the team, Managing Teams That Work With AI for its manager, or the AI Playbook Workshop for a cross-functional group.
Details: scope and deliverables
Scope
- Select 3 to 5 use cases with the team, scored on time saved, risk and effort.
- Train the team, then build prompt libraries, assistants or simple automations for the chosen use cases.
- Set a check step and an owner for each one.
- Measure before and after on the measures agreed at the start.
- Decide per task what AI does, assists or leaves alone.
- Build on your documents and examples.
Deliverables
- Scored use-case list.
- Working prompts, assistants or automations, each with a check step and an owner.
- A results summary with the measured effect, including the use cases that did not work.
- A 90-day plan for the next round.
When you do not need a package
- You have fewer than 10 people, one approved AI tool and written data rules. Book a course instead.
- You only need your staff trained. Book a course.
- You need legal advice on a specific AI system, such as one the AI Act treats as high-risk. You need a lawyer. We are not one.
Questions to ask any AI consultant, with our answers
Is the price fixed before work starts?
Yes. After a 30-minute scoping call you get a fixed quote, and work starts only after you agree to it. Basis: Price and contract.
What do we own at the end?
Every document we write for you, once paid: policies, tool lists, playbooks. Basis: general terms 6.3.
Who sees our information?
Only us, for your package only. We delete our working copies within 30 days of delivery, and we sign your NDA on request. Basis: general terms 6.4.
What about personal data?
Where a package involves personal data you control, we work as your processor under a data processing agreement. Basis: general terms 6.5.
How do we know it worked?
Every package ends with named deliverables. The adoption programme measures before and after, including what did not work. Basis: package 4.
What does this mean for the AI Act?
No package can promise compliance. It supports your Article 4 AI literacy duty and leaves the records to show it. Basis: AI Act, Article 4.
Price and contract
Every package starts at €5,000, excl. VAT where it applies. The fixed price for your scope is agreed after the scoping call and stated in the quote before work starts. The paired course is booked separately on its course page: online, live at €399 per person or at your office at €2,900 per course day for your team. We keep your material confidential and, where a package involves personal data you control, sign a data processing agreement (general terms 6.4 and 6.5).
Example: a 25-person company takes the AI starter package from €5,000 and AI Basics at Work at its office in 2 groups for €5,800, so from €10,800 excl. VAT in total.
Questions
Do we need our works council?
Only for one step. In the Shadow AI assessment, before the network-log count, you check with your works council whether it must consent, and with your privacy contact whether a DPIA is needed. We supply a written description of the processing for both.
Can you work with our IT supplier?
Yes. The AI starter package includes 1 hour with your IT supplier or whoever manages your accounts and devices. In the Shadow AI assessment, your IT team or supplier runs the network-log extract.
We already have a policy. Is this still useful?
Yes. The AI policy and approved tool list package writes the AI policy around your existing policies.
Can it run in Dutch?
No. The work and the documents are in English, as are our courses.
How long does it take?
2 weeks for the AI starter package, 2 to 3 weeks for the Shadow AI assessment, 2 to 4 weeks for the policy and tool list, and 8 to 12 weeks for the adoption programme.
What happens on the scoping call
- 30 minutes. We ask which AI tools your people use, with which data, and what you want settled.
- Within 2 working days. You get a written scope and a fixed quote.
- Your call. Work starts only after you agree. If a course fits better than a package, we tell you.
- WhatsApp: chat with us
- Phone: +31 6 20 51 73 96
- Email: advisory@ai-business.school