This is for law firms, surveyors and accountancy practices that have been asked how they use AI, or expect to be soon. We find out which AI tools your people use and what goes into them. Then we write it down in a form you can put in front of an insurer, a regulator or a client. It costs £1,500 fixed. The work is remote, takes five working days, and ends with a 30-minute walkthrough.
Prices exclude VAT, which is added where applicable.
Prices exclude VAT, which is added where applicable.
The pack has six parts.
The AI tools the firm uses, as far as the interviews and the settings review show: which teams use each one, what client data goes into it, and whether the provider trains on that data. We record what each provider's terms and your account settings say, but we can't audit the provider itself.
What staff may and may not do with AI. It fits on one page and is written in language your people can actually follow.
Who reviews AI-assisted work before it reaches a client, and how that review is recorded. It names roles at named steps, rather than stating that human oversight exists.
Draft answers for the AI sections of PII proposal forms and client due-diligence questionnaires, based on what the register shows. You check them, and they go out in the firm's name.
A live 45-minute remote briefing for staff on the policy and the supervision protocol, recorded, with a record of who has had it and when.
What to fix now and what to leave alone, written so it can be forwarded to whoever has to approve it.
The questions come from three places: your insurer, your regulator and your clients. Each part of the pack is there because one of them asks about it.
Brokers to solicitors in England and Wales report that PII proposal forms now ask about AI, though a firm may not meet the questions at every renewal. The insurers behind Gallagher's LawInsure product have added an AI question set that covers deepfake fraud as well as the firm's own use of AI. The pack answers the questions about the firm's own use of AI.
What PII insurers are asking, with sourcesA client's due-diligence questionnaire can arrive with an AI section and a deadline. The written answers in the pack are drafted for that situation, from what the register shows your firm actually does.
On 17 August 2026 the SRA published a warning notice on misuse of AI. It says solicitors and firms stay accountable for AI-assisted work, must protect client confidentiality and must keep staff competent and up to date, and that ignoring it risks disciplinary action.
The RICS professional standard on responsible use of AI has applied to RICS members and regulated firms since 9 March 2026. If AI plays a material part in your surveying work, the standard requires written policies on buying and using AI, safeguards for client data, a register of the AI systems you use, a risk register and documented due diligence on AI suppliers. The pack covers part of that.
What the standard asks of surveying firms| The question | Where the pack answers it |
|---|---|
| How is AI used across the firm, and what client data goes into it? | AI use register |
| What policies and procedures are in place? | A one-page AI policy |
| Are staff trained? | Staff briefing and training record |
| How is AI output checked before it reaches a client? | Supervision protocol |
| What do we write on the form? | Written answers for insurers and clients |
The pack gives you a written basis for each answer. It can't promise how an insurer, a regulator or a client will respond.
The work is remote. You'll need a named contact at the firm who can get us answers, and someone who can check the account settings of the AI tools you pay for. The staff briefing is a live 45-minute remote session, and it's recorded. Set aside about three hours of staff time in total.
Before we start
We check that the pack is the right thing and agree a start date. If you have a PII proposal form or a client questionnaire in front of you, send it over.
Day 1
A kick-off with your named contact, and a list of the AI tools people at the firm use.
Days 2 and 3
Remote interviews of 30 minutes each with up to four people, including whoever is responsible for risk. We also review each tool’s terms and account settings.
Days 4 and 5
We write the pack from what the interviews and the settings review show.
Afterwards
A 30-minute call to go through the pack with whoever has to approve it. After that the documents are yours to use, update and share.
We're not a law firm, so nothing in the pack is legal advice. We can tell you how your AI tools are used, what they touch, where a person checks the output and what record exists. Whether a specific obligation applies to your firm is a question for your own advisers, and the pack says so wherever you reach that line.
It doesn't make the firm compliant with the EU AI Act, the RICS standard or anything else, and no supplier's certificate can do that either.
The pack covers the firm's own use of AI. The deepfake questions are about fraud and identity checks, which sit with your own risk procedures rather than this pack.
No. Certification is a separate, longer and more expensive process run by a certification body, and you may not need it at all. The pack is a working record of how your firm uses AI now.
It covers part of it. The pack gives you a register of AI tools, a policy, a supervision protocol and a training record. Where AI plays a material part in your surveying work, the standard also requires things the pack doesn't include, such as a risk register with each risk rated (red, amber, green or a similar method) and reviewed at least every quarter, written due-diligence requests to AI suppliers, written explanations for clients who ask how AI was used, and written decisions on whether an AI output is reliable, made or supervised by a named surveyor.
For an RICS-regulated firm, our page for surveying firms lists, item by item, what the pack covers and what your firm still needs to do.
Then the verdict says so. You keep a written record of how the firm uses AI, and there's nothing else to buy.
It can, and being based outside the EU isn't the test. Our guide to the EU AI Act and ISO 42001 sets out what applies and when. Whether a specific obligation applies to your firm is a question for your own advisers.
The person on your first call writes the pack. There are no hand-offs. We went through our own ISO 42001 audit in 2026, so we've already had to answer these questions in writing about our own business.
The pack is the same. The insurer reports above concern solicitors in England and Wales, so we don't assume your insurer asks the same questions. If your insurer or a client does ask how the firm uses AI, the pack is the written account you answer from. Wolsten Studios is based in Larnaca.
The documents are yours. A register is only accurate on the day it's written, so it needs updating as tools change. You can do that yourselves in the same format, or we can keep it for you as part of Embedded Head of Digital. Nothing follows unless you ask for it.
Tell us what has prompted the question. It might be a proposal form, a client questionnaire or the RICS standard. If the pack is the right next step, we'll agree a start date. If it isn't, we'll say so on the call. The call is free and commits you to nothing.
Prefer email? hello@wolstenstudios.com. We read every enquiry.
