Skip to content

AI audit

AI audit for SMEs and mid-sized companies

Optim-AI's AI audit is designed for SMEs and mid-sized companies with 10 to 2,000 employees. It starts at 9 days of consultant time, depending on headcount, spread over three months at most. It produces a quantified picture of your actual use of AI, your exposed data and your risks. The countermeasures plan is included in that duration. The amount is a fixed fee, given in writing before any commitment.

Who it is for

Leaders who want an actionable plan

The audit is for SMEs and mid-sized companies with 10 to 2,000 employees that want an actionable plan that will stand up in committee.

No technical expertise is required. Nor do you need to have launched a project: AI is often already present without anyone having decided it, and the audit starts from that reality.

If you do not yet know whether AI warrants a budget, start instead with the two-day diagnostic, or with the free online AI maturity test.

How it runs

The findings, then the plan

The two days spent on the plan are included in the duration of the audit. The whole engagement fits within three months at most.

01From 9 days, over 3 months at most

Audit

Know where you really stand

We look at what actually happens in the company, not at what is written in the procedures. Interviews and questionnaires with the teams, an inventory of the tools already in use (including those nobody has declared), a map of data and data flows, a review of the most exposed roles. We also measure what already protects you: contracts, backups, in-house skills.

022 days, included in the audit

Countermeasures

Decide what to do, and in what order

Each risk identified receives a concrete response, and each opportunity a cost estimate. Together, we decide what starts now, what waits and what is dropped. The plan takes your constraints into account: budget, available staff, regulatory requirements, existing technical debt.

Interviews take place on site. The rest of the engagement is conducted remotely, with in-person meetings at key milestones.

Duration

How many days, by headcount

The length of the audit depends on headcount. The countermeasures plan, two days, is included. The whole engagement fits within three months at most.

Length of the AI audit by company headcount
HeadcountLength of the audit
Fewer than 10 employeesTwo-day diagnostic, in place of the audit
10 to 49 employees9 days
50 to 249 employees10 days
250 to 999 employees12 days
1,000 to 2,000 employees15 days
  • Each audited function beyond the standard scope adds 0.25 day.
  • Each additional site visited adds 0.5 day.
  • An engagement never exceeds 15 days. Beyond that, the scope is split into several engagements, each with its own report.

Deliverables

What you receive

The findings

  • Map of actual AI use, declared and undeclared
  • Inventory of sensitive data and its exposure
  • Maturity score by function: management, production, sales, support
  • List of risks ranked by severity and likelihood
  • List of opportunities ranked by estimated gain and effort

The plan

  • Action plan sequenced over 3, 6 and 12 months
  • AI usage rules written to be read, and ready to be attached to the company's internal regulations
  • Target architecture: what stays with you, what goes to a third party, and why
  • Performance indicators and review schedule
  • Estimate of the cost of implementation and the cost of inaction

At the end of the audit

A plan you can carry out with us, with another provider, or on your own. It belongs to you.

Limits

What the audit is not

An audit that concludes “do not go ahead yet” is a successful audit.

An accounting or financial audit

The audit covers your use of AI, your data and the related risks. It does not examine your accounts.

A certification

The audit awards no label and no certificate. It produces quantified findings that you can present to your executive committee or your board.

A sales pitch for tools

Optim-AI has no reseller agreements and receives no commission on the tools it recommends. The recommendation serves you, and only you.

A commitment to what comes next

The plan is written to be understood and carried out without us. You can stop after the audit.

Funding

AI audit and Bpifrance's Diag Data IA

Short answer

Can Bpifrance's Diag Data IA fund this audit?

Not through Optim-AI at present. The Diag Data IA, run by the French public investment bank Bpifrance, only funds a diagnostic carried out by an expert approved by Bpifrance, which we are not at this time. We prefer to state this here rather than have you discover it when the invoice arrives. Other forms of support exist depending on the region and the industry sector, and we tell you which ones apply to your situation during the first conversation.

Diag Data IA conditions

Frequently asked questions

Before starting an audit

How much does an AI audit cost?
The amount depends on the size of the company and on what already exists, which is why no price is published. It is given to you in writing, as a fixed fee and never on a time-and-materials basis, after the first conversation and before any commitment.
Do I need the diagnostic before the audit?
No. The diagnostic is for deciding whether AI warrants a budget. If an AI initiative is already under way, you can start directly with the audit, and stop after it.
Do I need to be using AI already to have an audit?
No. AI is often already present without anyone having decided it: in France, nearly one employee in two who uses generative AI at work has not told their manager (Ifop for Talan, March 2025). The audit starts from that reality, whether it is acknowledged or not.
Do I have to hire Optim-AI for the projects after the audit?
No. The countermeasures plan belongs to you. You can carry it out with Optim-AI, with another provider or with your in-house teams. The quote for a project is drawn up free of charge from that plan.

Next step

Is an audit justified for you?

Thirty minutes is enough to define the scope. The amount is then given to you in writing.