Services
Fractional Chief AI Officer
We take charge of AI in your organisation, part-time: deciding with management which tools are allowed and what data goes into them, checking AI features in your product before launch, and training your staff. You can then use AI across the business without exposing customer data, and within the law. Every opinion and every document goes out only after one of our lawyers has checked it.
Six questions about AI in your organisation
Each of these questions needs a decision, and someone in the organisation has to make it.
| # | Question | What gets decided |
|---|---|---|
| 1 | Do your staff already use public AI tools? | What they may enter, in which account, and what happens to the data afterwards. |
| 2 | Are you choosing an AI tool or supplier? | Where the data is processed, whether it trains the model, and how long prompts are kept. |
| 3 | Are you adding an AI feature to your product? | Output about an identifiable person is personal data, even when it was computed rather than collected. What the purpose is, what users are told, and what happens when the output is wrong. |
| 4 | Are you connecting an AI agent to your systems? | What the agent can see, what it may do, and where a person approves before it acts. |
| 5 | Do you want to train a model on customer data? | Whether the purpose the data was collected for allows it. |
| 6 | Is your product used by customers in Europe? | The EU AI Act may apply where the system’s output is used in the EU. |
What the Chief AI Officer does
These are the role’s responsibilities, from the plan with management to the reports back to it.
- A plan agreed with management: which uses to start with, which tools, and under which rules
- An AI use policy: who may use AI, which tools are allowed, what data may go in, and how output is checked
- A register of the AI tools in use, and a check of every new tool before it is approved
- A review of AI features in your product before launch, and again when they change
- Permission rules for AI agents: access on a need-to-know basis, view-only by default, and a person’s approval before action
- Staff training, and a periodic report to management
Rules and standards
Every policy and every review is checked against these rules and standards.
| Rule or standard | What we check |
|---|---|
| Israeli privacy law | The legal basis for the data each tool receives, consent where it is needed, and the data security level — as the Privacy Protection Authority applies them to AI in its draft guidance. |
| The EU AI Act | Where your product is used in the EU: its transparency duties already apply — people must be told when they are dealing with an AI system, and AI-generated content must be marked. A generative AI tool released before August 2026 must mark its output by 2 December 2026. |
| ISO/IEC 42001 | When a customer or investor asks for it: the policy, the tool register and the reviews are written in the structure of this international standard for managing AI in an organisation. |
How it runs
The role starts with getting to know your organisation, and continues as ongoing support.
- Initial fit call
- A first discussion of the need, the scope of the role and priorities.
- Scope letter
- The scope of the role, timetable and terms of engagement, in writing, before work starts.
- Getting to know you
- The tools already in use, the data going into them, and conversations with the relevant people on your side.
- Work plan
- A plan agreed with management, a first use policy and a register of the tools in use.
- Ongoing support
- Checking new tools and features, training, and periodic reports to management.
- 1. Fit call
- 2. Scope letter
- 3. Getting to know you
- 4. Work plan
- 5. Ongoing support
Questions people ask
What does a fractional Chief AI Officer do?
The work of a Chief AI Officer, part-time: deciding with management which AI tools the organisation uses and under which rules, checking AI features before they reach customers, training staff and reporting to management. It suits an organisation that uses AI across the business but does not need a full-time executive.
Is there an AI law in Israel?
Not a dedicated one. The Privacy Protection Law applies to a system that processes personal data — according to the Privacy Protection Authority’s draft guidance, both when it is trained and when it is used. A product used in Europe may also come under the EU AI Act.
May employees paste customer data into a public AI tool?
Not as it is. First check exactly what goes in. If it includes personal data, use an approved company environment, or mask the details — replace names with roles and remove identifiers — and check the output before using it.