Book a call
Menu

Guides

Guides to buying AI services

Business case

Is AI worth it for us, and are we ready for it?

Workplace AI assistants

Which AI assistant should we buy, and how do we roll it out?

AI coding agents

Which coding agent should our engineers use, what will it cost and how do we roll it out?

Automation and agents

What should we automate, and with which tools?

Building production AI

How is AI built to run in production, what data does it need and what do the terms mean?

Choosing a supplier

How do we tell AI suppliers apart, and contract with one well?

Staffing AI work

Should we hire, contract or bring in a team for AI work?

  • Hiring an AI engineerHiring guide · Start here

    Should we hire an AI engineer, contract one, bring in a team or buy a fixed-scope build?

  • What does an AI solution architect do, and when do you need one?

  • Should we build AI features into our software product with our own team, hire for them, bring in a partner, or combine them?

  • Do we need a chief AI officer or a head of AI, and when should we hire one?

Governance, risk and compliance

How do we run AI safely and meet the rules that apply to us?

  • AI governance frameworkGuide · Start here

    What should an AI governance framework contain, and how do you enforce it?

  • What does AI governance software do, and when is a documented process enough?

  • How do we forecast, cap and attribute AI spend across seats, tokens and agent runs?

  • What can AI do in contract review, and where does a lawyer still have to sign off?

  • What makes an AI chatbot or assistant HIPAA compliant, and do ChatGPT and Claude offer a business associate agreement?

  • Can AI and agents do part of the financial close without creating a SOX control deficiency?

  • SR 26-2 replaced SR 11-7 and left generative AI out of scope. What do banks need for their language model systems now?

  • How do you assess the risk of an AI use case before you build it?

AI in the Gulf

What do AI projects in the Gulf have to meet, and how do we deliver them there?

  • Gulf AI data residencyGuide · Start here

    What should enterprise buyers ask about AI data residency in the Gulf?

  • Which duties in Saudi Arabia’s Personal Data Protection Law apply when an AI system processes personal data?

  • What does the CBUAE’s AI guidance note expect of a UAE bank or insurer, and what evidence shows it?

  • What does an AI system have to meet to be used in Abu Dhabi healthcare?

  • How well can OCR and document AI read Arabic and bilingual forms, and how do we test it on our own documents?

  • How do we build AI search that answers questions in Arabic and English from documents written in both?

  • What does DIFC Regulation 10 ask of a firm that uses AI on personal data?

  • What does the CBUAE Outsourcing Regulation require in a UAE bank’s contract with an AI vendor?

  • What must an AI system register hold to satisfy the QCB, the CBUAE and Abu Dhabi’s Department of Health, and how is it kept current?

  • Which human oversight model can a Gulf bank use for which AI system, and what do the UAE and Qatar central banks require?

  • What does Bahrain’s Personal Data Protection Law ask of an AI system before it goes live, and where can the data be sent?

  • What does Bahrain’s government AI policy ask of the suppliers who sell AI to government entities?

  • What does Qatar’s data privacy law, Law No. 13 of 2016, require before an AI system processes personal data?

  • What does the Qatar Central Bank’s AI Guideline require before a bank or other licensed entity launches an AI system?

The AI playbook

Each short film shows one move that makes an AI assistant more useful at work, and opens a written guide with the exact words to type. Watch them in order in the AI playbook.

Some films teach the assistant about you. Five things you wrote become a voice skill that makes AI write like you, and one short interview becomes custom instructions the assistant writes for you.

Others hand it your team's standards: your review comments, turned into a checklist the team runs before you read a draft, and the brand book, rewritten as rules the assistant can apply without interpreting.

Latest analysis

Dated reads on new AI announcements and what each one means for enterprise buyers.

  • On the same day Anthropic made Claude Code Review generally available and GitHub did the same for AI Scan and agentic autofix. Both are billed by usage, neither blocks a merge, and one is closed to organisations on zero data retention.

  • Anthropic's new beta sends a trace of every Claude model call, tool use and agent turn to the monitoring tools an enterprise already runs. The content setting, the delivery rules and where the data ends up decide whether it is an audit trail or a debugging aid.

  • Meta has put one of its two new models on a pay-as-you-go API and kept the stronger variant inside a coding subscription whose default setting lets Meta train on your content. The price, the data terms and what to check before a pilot.

  • The UK government has set out its first measures on serious AI risk: frontier AI on its own cyber defences, possible AI incident and near-miss reporting for essential services, and a response plan for incidents involving agents. What is decided, what is not, and what to have ready.

All analysis

Not sure which question is yours?

Half an hour is enough to work out which of these questions you are really asking, and what to do next.

Book a 30-minute callenquiries@1aym.comSee the services

Last reviewed · 1AYM