How to create an AI systems inventory
Find AI tools and embedded features, record each real use case, and connect personal-data uses to your GDPR records.
Read the guide ↗Practical guidance · Ireland
AI compliance,
without the legal fog.
Realistic stories showing where everyday AI use can create risk—and the simple steps that make it easier to manage.
Latest stories
What compliance looks like
in a real business.
These fictional composite stories are based on common situations faced by Irish SMEs. They are examples, not client testimonials or legal advice.
ChatGPT and GDPR: what Irish businesses need to check
Before staff paste a customer email, CV or meeting note into an AI tool, check the purpose, vendor terms, retention, transfers and safeguards.
Read the guide ↗EU AI Act deadlines: what Irish SMEs need to do now
The dates have changed. See which duties already apply, what began in August 2026 and when the main high-risk rules take effect.
Read the guide ↗What an AI acceptable-use policy should actually say
A practical policy structure covering approved tools, sensitive information, human review, checking outputs and reporting mistakes.
Read the guide ↗How to prepare for an AI audit without creating a paperwork exercise
Build a defensible picture of your AI systems, vendors, data, decisions, controls and evidence before the review begins.
Read the guide ↗The accountancy firm that thought it only used one AI tool
A Cork team believed ChatGPT was its only AI risk. A simple audit found AI inside email, meetings and its CRM—and one member of staff was pasting client data into a free account.
Read the story ↗When “helpful” CV screening became a serious compliance question
A recruiter switched on automated candidate ranking to save time. The problem was not automation itself—it was relying on a score nobody had checked or explained.
Read the story ↗The chatbot that knew more about customers than the owner realised
An online retailer launched a support bot in a weekend. Months later, it held names, order details and complaints—with no clear owner, retention rule or human handover.
Read the story ↗Start with what you already use