AI audit: measure your organisation's maturity and decide where to invest
An AI audit assesses your organisation's maturity: your processes, data and skills are examined to identify the uses of AI worth putting in place and the prerequisites still missing, before you invest.
An AI audit measures what an organisation can hand over to artificial intelligence today by assessing its maturity across five areas: data, processes, skills, culture and infrastructure. It is intended for chief executives, CIOs and chief data officers in organisations of every size, and ends with a costed roadmap that separates what can be tested now, what must be prepared and what should wait. There are three formats, from the shortest to the most thorough. The free online AI assessment gives a first reading in three minutes. The Flash Diagnostic, carried out in one week, examines key processes in two days of work, based on no more than five interviews; it costs €3,000 excl. VAT, an amount deducted in full from the next consulting engagement signed within sixty days of the debrief. The full audit, carried out in two weeks, covers all five areas and the departments chosen during scoping; it is quoted on request.
Updated
What the AI audit gives you
AI maturity mapping across 5 axes (data, processes, skills, culture, infrastructure)
5 to 10 priority AI use cases, identified during the audit within your own activities, with the expected return calculated for each
Gap analysis: missing prerequisites and upgrade costs
Prioritised roadmap: quick wins (under 3 months) and strategic initiatives (3 to 12 months)
Comparison with documented industry benchmarks, where comparable data is available
The AI maturity audit method in three steps
Interviews & data collection
Interviews with business teams, IT, and leadership. Analysis of existing processes, available data, and tools in place. Scoping distinguishes existing uses, tasks to improve, and each team's constraints. Findings are checked against documents and work examples, not just stated intentions.
Scoring & analysis
Structured assessment across the 5 maturity axes. Identification of high-impact, low-complexity use cases. Data: quality and access; processes: tasks and review steps; skills: ability to use AI and check its output; culture: adoption and responsibilities; infrastructure: tools, integrations, and security.
Debrief & roadmap
Presentation of results to your leadership. Delivery of the prioritised roadmap with budget estimates. Each opportunity is assessed against expected value, effort, required data, and risks. The debrief distinguishes feasible experiments, their starting conditions, and projects to postpone until prerequisites are met.
Three formats, from the shortest to the most complete
| Format | Length | Price | Who is interviewed | What you get |
|---|---|---|---|---|
| Online assessment | 3 minutes | Free | Yourself | Your maturity level out of five, shown immediately, and a report on request |
| Flash Diagnostic | 1 week, 2 days of work | €3,000 excl. VAT, deducted from the next consulting engagement | Leadership and owners of key processes, five interviews at most | Three to five use cases to test, ranked by gain and effort, a short memo and a one-hour debrief |
| Full audit | 2 weeks | On quotation, by size and number of departments | Departments chosen at scoping, IT, data | Five-axis mapping, prioritised use cases with their expected return, costed roadmap |
The five levels of AI maturity
The audit places your organisation on the same scale as the online assessment, then backs it up with interviews and examples of real work.
| Level | What you see |
|---|---|
| 1. Discovery | AI is already in use, but its use remains individual, with no shared framework or monitoring. |
| 2. Experimentation | Volunteers work with chosen tools; the next step is to give them a framework and extend what has proved its worth. |
| 3. Structuring | Experimentation is behind you: a shared framework must be written and enforced, AI built into processes and its value measured. |
| 4. Integration | AI is part of the processes and its value is tracked; the task is to make teams self-sufficient with their tools. |
| 5. Autonomy | The organisation designs, deploys and manages its own AI tools, and sustains that command. |
When to carry out an AI audit
- Staff use AI tools with personal accounts, with no shared rules.
- Several departments each ask for a different tool.
- An AI agent project is planned without a costed use case.
- You must document the measures taken to support your staff's AI literacy, as Article 4 of the AI Act requires.
- An AI budget has to be allocated between competing requests.
The online assessment gives a free first measure; the audit is the in-depth study.
AI audit by sector
The audit takes your profession's rules into account: professional secrecy for law firms and notarial offices, health data and certified hosting for healthcare and social care institutions.
Who leads the engagement
Ulysse Trin, founder of Colombani.ai, holds the Claude Certified Architect Professional certification, issued by Anthropic, and nine practitioner certifications issued by OpenAI.
Check the certificationsAI audit price
The Flash Diagnostic, two days of work over one week, costs €3,000 excl. VAT, an amount deducted in full from the next consulting engagement signed within sixty days of the debrief (full audit, scoping, activation or monthly cycles), never from a training course. The two-week full audit is quoted according to the size of the organisation and the number of departments interviewed.
Frequently asked questions about the AI maturity audit
Who carries out an AI audit in a company? +
Three kinds of firms offer it: general consultancies, which fold it into a broader transformation; IT services firms, often tied to an integration offer; and AI-specialist firms whose consultant masters the tools they recommend. Colombani.ai belongs to the latter: the audit is led by Ulysse Trin, who holds the Claude Certified Architect Professional certification issued by Anthropic and nine practitioner certifications issued by OpenAI, with no vendor to promote.
Which levels of AI maturity are there? +
Colombani.ai uses five levels, the same as the online assessment: discovery (individual use without a framework), experimentation (volunteers and chosen tools), structuring (a shared framework to write and enforce), integration (AI in processes, its value tracked) and autonomy (the organisation designs and runs its own tools). The audit places the organisation on this scale and sets out what it takes to reach the next level.
What is an AI audit? +
An AI audit assesses an organisation's maturity, that is, its ability to use artificial intelligence in its work. It connects business objectives with available data, processes, skills, culture, and infrastructure. The result is a gap assessment and a roadmap for deciding what to test, prepare, or postpone.
How long does an AI audit take? +
One week for the Flash Diagnostic, two weeks for the full audit. The Flash Diagnostic covers key processes; the full audit covers all five areas and the departments selected during scoping. The interview schedule is set during scoping, depending on the availability of the people involved.
Do we need structured data to get started? +
No. The audit starts with interviews and an analysis of the current state. Even without a centralized database, we identify use cases and missing prerequisites.
What do you get at the end of the audit? +
The full audit provides a maturity mapping across 5 areas, 5 to 10 use cases identified during the audit and prioritised, with their expected return, a gap analysis, and a costed roadmap with quick wins and strategic initiatives. The Flash Diagnostic provides three to five use cases to test, ranked by expected gain and effort, a short memo and a one-hour debrief.
How should we prepare for an AI maturity audit? +
Identify the teams involved, the tools they use, and two or three tasks you want to improve. Process examples, a list of data sources, and internal AI usage rules help scope the interviews. Relevant documents and sharing arrangements are agreed before collection; no sensitive case files are needed for the first discussion.
What should an AI maturity audit examine in social care organisations? +
In a social care organisation, the assessment should distinguish support functions from care delivery. Searching internal procedures, preparing materials, and administrative reporting are possibilities to assess against actual needs. Each requires clarity on the data involved, authorised access, and expected human review. Uses affecting care decisions need specific scoping with service leads and those responsible for data protection.
How do you assess a company's AI maturity? +
AI maturity is assessed across five axes: data, processes, skills, culture, and infrastructure. Each axis is scored on observed facts, such as work examples, actual data access, and rules in force, rather than stated intentions. The assessment also records uses already in place, including those that go through no approved tool. A score only matters if it leads to a decision: what can be tested now, what needs preparing, and what should wait.
How does it differ from a digital or data maturity audit? +
A digital maturity audit measures how far processes and tools are digitised; a data maturity audit examines data governance, quality, and architecture. An AI maturity audit builds on both but asks a different question: which tasks AI can take on today, with what data, under what human oversight, and with what risks. Where a digital or data audit already exists, its findings are reused rather than redone.
How much does an AI audit cost? +
The Flash Diagnostic, two days of work over one week, costs €3,000 excl. VAT; the amount is deducted in full from the next consulting engagement signed within sixty days of the debrief, never from a training course. The full audit, carried out in two weeks, is quoted according to the size of the organisation and the number of departments interviewed. The first 30-minute call is free.
How does an AI audit differ from the online AI assessment? +
The online AI assessment is a free first reading: about a dozen questions, three minutes, and a level shown at once, at colombani.ai/en/ai-assessment/. The AI audit is the in-depth study: it relies on interviews and real work examples, and ends with a costed roadmap. Between the two, the Flash Diagnostic is a one-week study of key processes and first use cases; the full audit covers the five areas and the departments selected during scoping, in two weeks.
Related services
AI enablement in the workplace: from workshops to shared practice
AI enablement gives your teams a shared frame of reference for using AI in their work: hands-on workshops, internal champions and an upskilling plan.
2 to 8 weeksAI Act Compliance
AI system inventory, risk classification, Article 50 transparency and a roadmap aligned with the revised 2026-2028 timetable.
2 to 4 weeksGot a project in mind?
Describe your situation. The first 30-minute call is free. Get a frank response within one business day.