AI Governance Pack — Intake Questionnaire

Section 1 — Your details

Tell us about you and your business

This helps us tailor the language, scope, and legal context of your governance documents.

Your first name *

Your email address *

We'll send your completed documents here.

Business name *

Industry / sector *

Briefly describe what your business does

Optional. Helps us personalise your documents further.

Section 2 — How you use AI

Your AI tools and use cases

This shapes your Acceptable Use Policy, AI Register, and Risk Assessment.

What are AI tools primarily used for in your business? *

Select all that apply.

Writing, drafting and communications

Research and analysis

Data analysis and reporting

Customer-facing interactions

Code and software development

Process automation and workflows

HR, recruitment or performance management

Creative content generation (images, video, audio)

Are AI-generated outputs used directly in work delivered to clients or customers? *

E.g. reports, advice documents, code, creative content, communications sent under your business's name.

Yes — AI outputs are included in client deliverables

Reports, advice, content, code, or other work delivered to clients

Sometimes — AI assists but outputs are substantially reviewed before delivery

AI is a drafting aid; humans review and reshape before it reaches clients

No — AI is used for internal purposes only

Admin, research, internal drafts — nothing goes directly to clients

If "yes" or "sometimes" — your Acceptable Use Policy will include output verification requirements, and your Transparency Statement will address client disclosure obligations.

Does any AI tool in your business make or significantly influence decisions about people? *

E.g. loan approvals, hiring shortlisting, performance assessments, clinical recommendations.

Yes

Affects real decisions

Sometimes — AI informs but humans decide

Informs but humans decide

No

Productivity use only

If "yes" or "sometimes" — your Risk Assessment will include enhanced human oversight requirements.

Section 3 — Risk and compliance

Your data and regulatory context

This calibrates your Risk Assessment, Incident Response Plan, and privacy obligations.

What types of personal information does your business handle? *

Select all that apply.

Contact details (names, addresses, phone numbers, email)

Financial information (bank details, payment information)

Health or medical information

Employee or HR records

Identity documents (passports, driver licences)

Information about children or minors

Legal or litigation-related information

None of the above

Do staff use personal or client data as inputs into AI tools? *

E.g. pasting client emails, uploading documents, entering patient details.

Yes, regularly

Sometimes

No

Not sure

Is your business subject to the Australian Privacy Act 1988? *

Yes

No

Not sure

Is your business subject to any industry-specific regulatory frameworks? *

Select all that apply.

Financial services (ASIC, APRA, AFS licensing)

Healthcare (AHPRA, My Health Records Act)

Legal services (Solicitors' Conduct Rules)

Government contracting

International data obligations (e.g. GDPR)

None of the above

Not sure — I may have obligations I haven't identified

Does your business have an existing privacy policy? *

Yes

No

Not sure

Section 4 — Vendors

How you source AI tools

This shapes your Vendor Due Diligence Checklist and contract guidance.

How does your business typically acquire AI tools? *

Select all that apply.

Off-the-shelf SaaS products (e.g. ChatGPT, Copilot subscriptions)

AI features built into existing software (e.g. AI in your accounting or CRM tools)

Custom-built or bespoke AI solutions

AI used by external consultants or contractors on your behalf

Does anyone in your business currently review vendor privacy policies or data handling terms before adopting an AI tool? *

If "rarely" or "no" — your Vendor Due Diligence Checklist will include a step-by-step first-time review process.

Are your AI vendors based in Australia or offshore? *

Mainly Australian

Mix of both

Mainly offshore

Not sure

Offshore vendors trigger cross-border data disclosure obligations under the Privacy Act — we'll include specific guidance.

Section 5 — Governance preferences

Finishing up

Almost done. Just two final questions to personalise your pack.

Who will own AI governance in your business? *

The business owner / CEO

A designated manager or team lead

IT or operations team

Not yet decided

Name of governance owner (optional)

This will appear on your documents as the named contact. Leave blank to use the role above.

Is there anything specific you would like addressed in your governance documents?

Optional. Any particular concerns, use cases, or context we should know about.

Section 6 — Choose your pack

Select your AI governance pack

All packs include documents tailored specifically to your business, delivered as editable Word files within 5 minutes.

$89 AUD

Essentials Pack

3 core documents

AI Acceptable Use Policy
AI Risk Assessment
AI Incident Response Plan

Perfect for smaller businesses taking their first steps with AI governance.

Tell us about your business