Results from
real engagements.
Anonymised. Verified.

Financial Services

UK Building Society

The situation

A mid-tier building society engaged EAIC after its audit committee raised concerns about AI deployment in customer-facing mortgage decision tools. The board had received questions from the FCA and had no consolidated view of what AI was running or what its regulatory classification was.

Key findings

• ✓23 AI systems identified — 14 were unknown to the governance team
• ✓Three systems in scope for EU AI Act high-risk classification
• ✓£1.8M regulatory exposure quantified across mortgage decisioning tools
• ✓£680k annual automation opportunity identified in back-office processing

Outcome

Full Sentinel engagement and Citadel platform go-live. The board received a complete AI audit pack at engagement close. The building society achieved ISO 42001 readiness within five months of engagement completion. FCA supervisory questions answered with documented evidence.

Healthcare

NHS Trust

The situation

An NHS Trust operating across three sites engaged EAIC to establish a governance baseline ahead of a planned expansion of AI-assisted clinical decision support. CQC inspection was scheduled within 18 months.

Key findings

• ✓31 AI systems found, including 12 shadow AI tools in clinical departments
• ✓Eight systems requiring formal AI Act risk assessment identified
• ✓£529k in annual savings modelled from administrative workflow automation
• ✓Clinical AI governance framework built to CQC standards

Outcome

Sentinel engagement with Healthcare Vertical Pack overlay. Clinical governance workflows integrated into Citadel. The Trust's AI governance framework was accepted by CQC inspectors at their next scheduled review.

Professional Services

UK Law Firm (Top 100)

The situation

A top-100 UK law firm engaged EAIC after a partner raised concerns about lawyers using personal AI tools for client work without firm oversight. Only 4 of 31 AI tools in use were known to IT.

Key findings

• ✓31 AI tools found in use — only 4 were known to IT
• ✓Two tools used for client document drafting presented material privilege risk
• ✓SRA compliance exposure quantified at £340k
• ✓AI governance policy gap register: 18 priority actions

Outcome

Sentinel Diagnostic followed by full engagement with Legal Vertical Pack applied. The firm implemented a firm-wide AI acceptable use policy and deployed Citadel for ongoing monitoring within six weeks of Citadel go-live.