Somewhere in your organisation, an employee is using AI right now. They may be drafting emails with it, summarising documents, screening CVs, or feeding client data into a tool whose privacy settings nobody has checked. Most businesses have reached this point without a policy, without training, and without any clear picture of what that exposure looks like.