AI is already inside your business. The rules may not be.
Take a short check to see whether your team has clear rules for approved AI tools, sensitive data, review standards, and accidental disclosure.
Small teams are using ChatGPT, Claude, Gemini, Copilot, AI note takers, and AI writing tools. The question is whether your team knows what is approved, what data should stay out, and who reviews AI-assisted work before it reaches a client.
A picture of what good looks like.
The ai policy gap score surfaces the spots where written rules and review cadence make the biggest difference. The check asks ten short questions across the topics below.
- Approved tools
- Prohibited data
- Client data handling
- AI note takers
- Human review
- Employee acknowledgment
- Accidental disclosure response
- Quarterly review cadence
Client records, payment details, credentials, confidential files.
All client-facing AI outputs reviewed by a teammate before send.
Notify the office manager within one business day. Capture the what, when, and what was shared.
Start the AI Policy Gap Index.
Ten short questions. About three minutes. Your score and a recommended next action land at the end.
How we measure this.
How we measure this
Ten self-reported questions across approved tools, prohibited data, review cadence, acknowledgment, and accidental disclosure response. Each answer maps to a 0 to 3 weight and the result is normalized to a score out of one hundred.
What your score means
Your AI Policy Gap Score is an educational readiness signal. It helps you identify what to review, write down, or organize next. Higher scores indicate clearer rules and review cadence; lower scores indicate the spots where written rules are missing.
What this does not claim
The score does not verify your controls, prove security, determine compliance, or guarantee anything about your AI usage in practice. Index8 Research is educational and does not provide legal, insurance, compliance, or cybersecurity consulting advice.
How aggregated trends may support future research
Anonymized and aggregated responses may inform future Index8 Readiness Research benchmarks. Individual responses are never published. Sample-size and methodology gates are documented in docs/research/future-benchmark-plan.md.
Early Index8 Research resources are field studies and educational tools. As response volume grows, Index8 may publish aggregate trends and annual benchmarks. Sample-size and methodology gates are documented before any public claim.