A useful AI audit should leave you with a decision, not a pile of possible ideas.
It should tell you which repeated jobs are worth testing, what the AI would read, what it should produce, who checks the result, where the risk sits, and what the first small version should do.
The best outcome is often a shorter list than you expected.
Start with the jobs people already repeat
An AI audit should begin with real work, not with a catalogue of tools.
The useful questions are ordinary ones. Which enquiries keep arriving incomplete? Which documents does someone check by hand? Which reports take too long to prepare? Which customer questions are answered from the same material every week? Which tasks depend on one person's memory?
Those are better starting points than "where can we add AI?" because they are already attached to time, cost, and frustration.
If the audit cannot name the repeated job, it cannot judge whether AI belongs there.
Separate good ideas from good first projects
Some AI ideas sound useful but make poor first projects.
They may need messy source material, too many system connections, too much judgement, or a level of customer trust that has not been earned yet. They may depend on the team agreeing a process that does not exist today.
A good audit should not treat every idea as equally ready. It should sort candidates into clear groups:
- worth testing first
- useful, but not first
- fix the process before adding AI
- not a good AI fit
That sorting is the value. It stops the business spending money on the idea that looks most impressive but carries the most hidden work.
Say what the AI is allowed to read
Most AI projects succeed or fail on source material.
An audit should say what the AI can safely use: service pages, policies, product data, past enquiries, internal notes, approved documents, project records, or examples of previous work.
It should also say what is missing. Old documents may disagree. Prices may live in someone's head. Policies may have changed. A customer-facing answer may need approval before it can be used.
This matters because an AI tool cannot reliably answer from material the business does not trust.
Before anyone starts a working tool, the audit should make the source question plain: what can the AI read, which source wins when two sources disagree, and who keeps the material current?
Name the review point
The review point is where a person checks the AI's work.
For a first project, that point should usually be obvious. AI drafts the reply, and a person sends it. AI prepares the report, and a manager reviews it. AI flags missing information, and the team decides what to ask next.
If nobody owns the review, the project is not ready.
The audit should name the person or role, the moment they check, and what they are checking for. It should also say what happens when confidence is low or the answer looks wrong.
That is not extra ceremony. It is how a small business keeps control while still saving time.