The sample report
The anonymised report from the audit of our own agency. Client names removed; the tool list, counts and data categories kept.
22 September 2026
22 September 2026
Being produced this week.
The audit of our own agency runs from 17 to 22 September 2026, with the same questionnaire, scan and report every client receives. The anonymised summary, the slide and a downloadable PDF appear here on 22 September. Until then, the register below shows the shape of the page with illustrative rows.
Register of AI systems in use
| System | Client data passing through | Approved |
|---|---|---|
| ChatGPT, free tier | Matter summaries, draft letters | Not approved |
| Meeting assistant, personal account | Client call transcripts | Not approved |
| Writing assistant, browser extension | Emails, client documents | Not approved |
| Microsoft Copilot, firm licence | Documents inside the tenancy | Approved |
| Page summariser, browser extension | Every page viewed, including the case system | Not approved |
Illustrative rows, not a client. The anonymised report from our own agency is published on 22 September 2026.
How it was produced.
- Discovery questionnaire completed by every person who has touched client work.
- Scan of connected apps, browser extensions on every machine, twelve months of card statements, mailbox vendor invitations and meeting-tool settings.
- Each system scored in the assessment matrix against UK GDPR, the DPA 2018 and ICO guidance, as at the assessment date.
- Client names removed. Tool list, counts and data categories kept.
The same register, for your firm.
Twenty minutes on a call gives you a one-page snapshot of the likely leakage points. The audit produces the full register in two weeks, at a fixed price.