AI · two things, not a catalogue

Ask your own files. Every answer cites its document.

One data room for policies, bills, ledgers, GHG workbooks, certificates, board minutes, supplier responses and last year's EcoVadis, BRSR and CDP answers. Built and run by us, inside your tenancy. No citation, no answer.

Book the two-week audit See the data room ↓

Sustainability data roomSample

QWhat evidence do we have for the EcoVadis environmental policy criterion?

Three documents support it. Environmental Policy v2, board-approved 14 February 2025. ISO 14001 certificate, valid to March 2027. Internal memo to plant heads. Not found: any record that the policy reached staff below plant-head level.Sources: policies/env-policy-v2.pdf · certificates/iso14001-2024.pdf · minutes/board-2025-02-14.pdf

Second question: what is missing for Scope 3, Category 1?

Spend data covers 100% of purchases; supplier-specific factors cover 0%. Twelve suppliers make up 71% of spend. Not found: any supplier emissions response. Next step: the supplier questionnaire, to those twelve first.Sources: ledger/purchases-fy25-26.xlsx · inventory/scope3-cat1.xlsx

Both answers end with what is missing. A report is written from that part.

01 · The data room

What comes out.

Runs on Claude. Set up by us, handed to your team with a written SOP.

Comes outActivity data from bills. Ledger lines mapped to scope and category, with a confidence flag. Evidence matched to EcoVadis, GRI and BRSR. A missing-items list per question.

Never comes outAn emission factor the workspace invented. Arithmetic done in prose. A gap filled with a plausible number.

Who checksThe sustainability mentor recomputes three sampled lines per inventory by hand. Your team repeats it before sign-off.

02 · The AI audit

Two weeks. One report. A roadmap you can act on.

How you use, govern and secure AI today, before you scale it. Fixed scope, agreed in writing. You keep the report either way.

Book the audit

Audit scope · three areasWhat we look at

Area	Questions answered
Value	Which use cases run today: cost, return, adoption.
Governance	Policy, human oversight, data governance, vendor terms, regulatory readiness.
Security	Shadow AI, prompt injection, data leakage, retrieval and knowledge-base review, documentation.

Each finding carries a severity, an owner and a date. The roadmap follows that order, not a vendor's.