The AI licences are bought but barely used. The audit checks whether the answer is a tool, an automation, or training first.
A 28-person services firm gave its team AI assistants six months ago. A handful of people use them every week, most do not, nobody is sure what may be pasted into them, and the results differ from desk to desk. Management asks for "an automation" on top. The audit works out whether that is the right next step, or whether the team first needs the skills and ground rules that make any automation worth building.
Education (AIRIES)
Train the team first: education is the only path that addresses the root cause and unlocks every future automation option.
The firm's core problem is not a missing automation but a missing foundation: staff lack the knowledge, confidence, and shared rules needed to use AI safely or to specify, commission, or oversee any workflow. Jumping to automation now would produce a system nobody can maintain, check, or trust, and would deepen the compliance risk rather than resolve it. The right first move is a structured learning programme that builds AI literacy, establishes clear data-handling rules, and surfaces the two or three processes that are genuinely ready to automate. The firm has no preferred tech stack and no internal developer, so the education path also avoids creating a dependency on external build costs the team cannot sustain. Once the team completes levels 1, 3, and 5 of the AIRIES programme, the firm will be in a position to commission and govern automation with confidence.
The client has no stated tech stack preference and no internal developer resource, so there is no infrastructure constraint to work around. The education path requires only the AI assistant licences already in place.
In partnership with AIRIES, the AI learning platform. These levels fit your result.
-
1
Foundations of Applied IntelligenceHow AI works, prompting for everyday work, and your first mini AI project.
-
3
Corporate Applied Intelligence & AutomationTurn your own tasks into AI workflows, build reports and dashboards, set up a personal AI assistant.
-
5
AI for Strategy & OperationsOptimise operations, forecast, and automate KPIs and executive reporting.
The firm's primary obstacle is not technology but knowledge: staff do not know how to use AI safely, managers do not know how to evaluate automation proposals, and no one can maintain what might be built. Level 1 removes fear and builds a shared baseline across all staff. Level 3 gives the process owners the practical skills to document tasks and build simple workflows, directly enabling the future automation the partners want. Level 5 equips the managing partners to make informed investment decisions and avoid commissioning projects the firm cannot sustain.
- Safe and compliant AI prompting under UK GDPR
- Turning repetitive tasks into AI-assisted workflows
- Evaluating and governing AI outputs in client work
- KPI setting and decision-making for AI adoption
All 28 staff take Level 1; team leads and process owners take Level 3; managing partners take Level 5.
Process Overview
This Leeds-based accountancy and advisory firm has 28 staff and a set of AI assistant licences that are going largely unused. Each day, team members encounter tasks such as drafting client correspondence, summarising documents, conducting research, and writing up meeting notes. At the moment, each person decides independently whether to use the AI tool or work manually, prompts it without any shared guidance, and judges the output without a consistent quality check. There is no written policy on what client data can safely be included in a prompt, no agreed prompting standards, and no one in the firm with the technical background to build or maintain any automated workflow.
The managing partners want all 28 staff to use AI tools confidently and safely in their daily work. The end goal is a team that handles AI-assisted tasks with shared methods and clear data rules, and that has identified two or three processes well enough documented to automate properly. Currently, roughly 3,000 of these tasks occur each year, each taking around 30 minutes on average, which adds up to meaningful staff time that better AI use could reduce. The challenge is not a missing tool but a missing foundation: the knowledge, governance, and process documentation that would make any automation trustworthy and sustainable simply do not exist yet.
Path Scores
The root cause of every problem described is a skills and governance gap, not a missing technical tool. Staff distrust, unused licences, absent data policies, and no one able to maintain automation all point to education as the necessary first step. Without it, any other path will fail or create new risk.
A hybrid approach could work for specific processes once the team has baseline AI literacy and written data policies. It is not viable now because no one can specify, build, or oversee the human-in-the-loop gates, and compliance rules are not yet written. It is the logical next step after education.
AI workflows could eventually automate correspondence and month-end reporting, but the processes are not documented, rules are not clear, and no one in the firm can build or maintain a workflow. Deploying this now would create an unmaintainable system and a compliance liability.
Staying fully manual wastes the AI licences already paid for and leaves 3,000 tasks per year consuming avoidable staff time. It is the current default by inertia, not by design, and does not address the compliance gap either.
RPA requires stable, documented, rule-based processes and someone to maintain the bots. None of those conditions exist here. The work is highly judgement-based and varies by client, making RPA a poor fit even in the medium term.
There is no internal developer and no documented process to code against. Custom development would be expensive, create an external dependency, and still leave the team unable to use, check, or improve what was built.
Autonomous agents require mature governance, clear data boundaries, and staff who can supervise agent behaviour. The firm currently has none of these. Deploying an agent in this environment would amplify compliance risk significantly.
Process Dimensions
Eight dimensions drive the recommendation, scored 0–10 with a note on each.
Work is ad hoc and varies by client and team member; no documented processes or shared data structures exist.
No written rules for what can be pasted into AI tools, no shared prompting standards, and no documented process steps for any of the tasks involved.
Almost every interaction is an exception in practice: staff revert to manual work, distrust outputs, or avoid the tool entirely, making consistent automation impossible.
No APIs, no automation tooling, and an external IT provider with no automation remit; the environment is not ready for any technical integration.
3,000 tasks per year at 30 minutes each represents meaningful time cost, but the ROI can only be realised after the team is trained and processes are documented.
The nature of advisory and accountancy work means tasks, clients, and requirements change frequently, making rigid automation fragile without a skilled team to adapt it.
The majority of work involves client-specific judgement calls that cannot be reliably automated without human oversight and a team that understands when to intervene.
UK GDPR and client confidentiality duties are active obligations with no written internal policy; this is the most urgent risk to resolve before any automation is deployed.
ROI Estimate
£112,500
Current annual cost
60%
Estimated time saved
£67,500
Annual savings
3mo
Payback period
Current annual cost is based on 3,000 tasks per year at 30 minutes each at GBP 45 per hour, giving GBP 112,500. Build cost covers AIRIES programme licences for all 28 staff across three levels plus facilitation; a 60% saving is conservative given that drafting, summarising, and research tasks are highly amenable to AI assistance once staff are trained and policies are in place.
Implementation Roadmap
Before any further AI use, the managing partners and a nominated compliance lead should draft a one-page policy covering what client data may and may not be included in AI prompts, aligned to UK GDPR and client confidentiality duties. This removes the fear that is stopping staff from engaging and creates the governance foundation every subsequent step depends on. Effort is low but requires a partner decision and ideally a brief review by the firm's professional indemnity insurer.
All 28 staff complete AIRIES Level 1 to establish a shared baseline of how AI tools work, how to prompt effectively, and what the limits of the technology are. This directly addresses the distrust and inconsistency observed and gives everyone a common vocabulary. The six staff already using AI tools should be positioned as peer champions to support colleagues during this phase.
A cohort of six to eight people, including team leads and the partners most interested in automation, complete AIRIES Level 3 to learn how to audit their own tasks, build simple AI workflows, and document processes clearly. This cohort will identify the two or three processes that are genuinely ready to automate and will be able to specify and oversee any future build. This is the step that converts individual AI use into organisational capability.
The managing partners complete AIRIES Level 5 to develop the skills to set KPIs for AI adoption, evaluate automation proposals critically, and make informed decisions about which processes to invest in. This prevents the firm from buying a large project nobody can look after, which was explicitly named as a risk to avoid.
Using the skills from Level 3, the trained cohort maps and documents two or three candidate processes (likely correspondence drafting and month-end reporting) in enough detail to specify an automation. Each process should have clear inputs, outputs, decision rules, and data-handling requirements written down before any build is commissioned. This milestone is the gate before any technical automation work begins.
With documented processes, a trained team, and a data policy in place, the firm commissions a small pilot automation for the single best-fit process, using an AI workflow tool compatible with the existing AI assistant licence. The trained cohort owns the acceptance testing and ongoing oversight. Success here creates the template for scaling to the remaining candidate processes.
Risks & Considerations
The main risk of the education path is that it requires genuine commitment from the managing partners to allocate staff time for learning during a busy advisory calendar. If the programme is treated as optional or deprioritised, adoption will remain patchy and the licences will continue to go unused. A nominated internal champion and a clear completion deadline are essential to prevent this.
The secondary risk is that education alone, without the data policy milestone, could increase compliance exposure by encouraging more AI use before boundaries are clear. The policy must be completed before or alongside Level 1, not after. Once the team is trained and processes are documented, the firm should also ensure that any automation pilot is reviewed by its professional indemnity insurer, as some policies have specific requirements around AI use in client-facing work.
Architecture Overview
Hover to zoom · click for fullscreen
Why This Approach
The recommended path is Education via the AIRIES programme, and the reasoning starts with an honest diagnosis of what is actually broken here. Every problem the firm describes, including staff distrust of AI outputs, unused licences, inconsistent quality, accidental data exposure risk, and no one able to maintain anything built, points to the same root cause: a skills and governance gap. No technical solution addresses that gap. Deploying an AI workflow, an RPA bot, or any other automation into this environment would produce a system the team cannot check, cannot adapt, and cannot confidently use in client-facing work. It would also deepen the compliance exposure under UK GDPR and client confidentiality duties rather than resolve it.
The firm has no stated technology preference and no internal developer resource, which removes several options from practical consideration. Traditional Code requires a developer to build against documented processes, and neither condition exists. RPA requires stable, rule-based, well-documented processes and ongoing bot maintenance, none of which is available here. An autonomous AI Agent requires mature governance, clear data boundaries, and staff who can supervise agent behaviour; the firm currently has none of these, and deploying one would amplify risk significantly. AI Workflow automation is the most plausible near-term technical path, but it is only viable once processes are documented, data policies are written, and the team has the skills to specify and oversee what gets built. The Hybrid path, which combines automation with human-in-the-loop checkpoints, is the logical step after education for one or two specific processes, but it cannot be designed or governed today. Staying Manual wastes the licences already paid for and leaves 3,000 tasks per year consuming avoidable time without addressing the compliance gap either.
Education wins on every dimension that matters for this firm right now. AIRIES Level 1 for all 28 staff builds a shared baseline: how the AI tool works, how to prompt it effectively, and what the technology cannot do. This directly addresses the distrust and inconsistency that currently prevent adoption. Level 3 for team leads and process owners gives those individuals the practical skills to audit their own tasks, document processes clearly, and build simple AI-assisted workflows, which is precisely what the firm needs before it can commission any serious automation. Level 5 for the managing partners develops the judgement to evaluate automation proposals, set meaningful KPIs, and avoid commissioning projects the firm cannot sustain or oversee. These three levels, taken in sequence by the right audiences, produce the foundation that every other path depends on.
There is also a sequencing point worth making explicitly. The data and AI use policy must be written before or alongside Level 1, not after it. Encouraging more AI use before the boundaries around client data are clear would increase compliance exposure rather than reduce it. That policy is a low-effort task in terms of drafting time, but it requires a partner decision and ideally a brief check against the firm's professional indemnity insurance terms, since some policies have specific requirements around AI use in client-facing work. With the policy in place and Level 1 complete, the firm will have removed the fear that is currently blocking engagement and created the governance layer every subsequent step needs.
The projected return is real but it follows the education, not precedes it. At roughly 3,000 tasks per year averaging 30 minutes each, at a blended rate of around 45 pounds per hour, the current annual time cost is approximately 112,500 pounds. A conservative 60 percent saving on tasks amenable to AI assistance, once staff are trained and policies are in place, projects annual savings of around 67,500 pounds against programme costs in the 8,000 to 18,000 pound range. That is an attractive return, but only if the team completes the programme and actually changes how they work. The risk is not the technology; it is the managing partners treating the programme as optional during a busy advisory calendar. A nominated internal champion and a clear completion deadline are not optional extras; they are the conditions on which the return depends.
Comparing the Top Approaches
Education (AIRIES) scores a clear ten against every other path here, and the reason is straightforward: the other paths all assume a foundation that does not yet exist. Hybrid automation, which would otherwise be a reasonable next step for a firm of this size, scores only four because a hybrid approach depends on someone being able to specify the human-in-the-loop gates, write the data-handling rules, and oversee what gets built. None of those conditions are in place. Deploying a hybrid workflow now would mean commissioning external build costs with no internal person able to accept-test or maintain the result, and no written policy governing what client data flows through it. The compliance exposure would grow, not shrink.
AI Workflow sits one rung below Hybrid at three, and faces the same structural problem in a more acute form. Correspondence drafting and month-end reporting are plausible candidates for workflow automation eventually, but neither process is documented, neither has clear decision rules written down, and the team has not yet agreed what may or may not be included in a prompt. Building an AI workflow against undocumented processes is how firms end up with something that works for two weeks and then silently produces wrong outputs because a team member changed a step nobody recorded. RPA scores two and Traditional Code scores one for the same compounding reasons, with the added problem that both require either a stable, rule-based process or an internal developer, and this firm has neither.
Education (AIRIES) wins not because it is the cautious or conservative choice but because it is the only path that actually resolves the root cause. The firm already has the licences. The bottleneck is knowledge, confidence, and a shared set of rules. Once those are in place, the scores for Hybrid and AI Workflow rise significantly, and the firm can commission automation it can genuinely own and maintain. Every other path is a shortcut that skips the step the whole firm is blocked on.
How to Build It
The first action, running in parallel with or slightly ahead of any training, is drafting a one-page AI and data use policy. The managing partners, with input from a nominated compliance lead, need to set down in plain terms what client data may and may not be included in prompts sent to the existing AI assistant, how outputs should be handled, and who is accountable for reviewing AI-assisted work before it reaches a client. This does not need to be a lengthy document, but it needs to exist before the team is encouraged to use AI more actively. The professional indemnity insurer is worth a brief conversation at this stage, as some policies have specific language around AI use in client-facing advisory work. This policy is the governance foundation that every subsequent step depends on.
With the policy in place, all 28 staff complete AIRIES Level 1. This is not a half-day awareness session; it is a structured programme covering how large language models actually work, how to write prompts that produce consistent and useful outputs, and where the technology reliably fails. The six staff who are already using the AI assistant should be positioned as peer champions during this phase, running short informal sessions alongside the formal programme to answer practical questions about the tools already licensed. By the end of Level 1, the team has a shared vocabulary, a shared understanding of limits, and the confidence to engage with the tools rather than avoid them. The distrust and inconsistency that currently make automation impossible begin to dissolve here.
A cohort of six to eight people, including team leads and the partners most actively interested in future automation, then moves to AIRIES Level 3. This level teaches participants how to audit their own tasks, map process steps clearly, and build simple AI-assisted workflows using the existing AI assistant and, where appropriate, a lightweight workflow layer such as Microsoft Power Automate or Make, depending on the licence environment. The specific value here is that this cohort becomes the firm's internal capability: they can document processes in enough detail to specify an automation, and they can oversee and test what an external partner builds. They use Level 3 skills directly to identify the two or three processes genuinely ready for automation, most likely correspondence drafting and month-end reporting, and to produce the process maps that will serve as the brief for any future build.
The managing partners complete AIRIES Level 5 alongside or immediately after the Level 3 cohort. Level 5 focuses on setting meaningful KPIs for AI adoption, evaluating automation proposals critically, and making informed investment decisions about which processes to build against. This is the step that prevents the firm from commissioning a project it cannot look after. Once all three levels are complete and two or three processes are fully documented with clear inputs, outputs, decision rules, and data-handling requirements written down, the firm is positioned to run a tightly scoped pilot automation for the single best-fit process. That pilot, commissioned externally but owned and tested internally by the trained cohort, becomes the template for scaling to the remaining candidates. The data flow at that point runs from a documented trigger, through the AI assistant or workflow layer, to a human review checkpoint, and out to a client-ready output, with the trained team able to identify and correct any deviation at every stage.
Risks in Detail
The most significant risk of the education path is not technical; it is calendrical. A 28-person accountancy and advisory firm operates against hard deadlines, and if the managing partners treat the AIRIES programme as something staff fit around client work rather than something protected time is allocated for, completion rates will be low and the investment will not land. The risk is not that the training fails to work, but that it never properly starts. A nominated internal champion, a clear cohort schedule, and a firm completion date are not optional extras; they are the controls that determine whether the programme produces a trained team or a set of unused course licences to sit alongside the unused AI licences already in place. The data and AI use policy must also be completed before or alongside Level 1, not after. Encouraging more active AI use without first clarifying what client data may be included in prompts would increase compliance exposure rather than reduce it, which would be precisely the wrong outcome given that UK GDPR and client confidentiality duties are active obligations with no current written policy to support them.
The secondary risk sits further downstream, at the point where the firm moves from education into its first automation pilot. Accountancy and advisory work involves a high degree of client-specific judgement, and even a well-documented process will surface edge cases that the documented rules do not cover. An AI workflow that handles standard correspondence drafting reliably can still produce outputs that are subtly wrong for a particular client relationship or a nuanced regulatory position. Human review checkpoints are not optional in this environment; they are the control that keeps client-facing outputs safe. The pilot should be scoped conservatively, tested thoroughly by the Level 3 cohort before it touches real client work, and reviewed against the firm's professional indemnity requirements. Scaling too quickly from a working pilot to wider automation, before the team has built confidence in where the tool gets things wrong, is the most likely route to a compliance incident once the technical work begins.
Claude Code Starter
A scaffolded project ready to open in Claude Code. Unzip, open the folder, and Claude starts building immediately.
Claude Code Starter (.zip)
Your own assessment includes a ready-to-use project scaffold: CLAUDE.md, pyproject.toml, src/agent.py and .env.example. Open the folder in Claude Code and it starts building.