From Cautious to Confident: Governed AI at a Creative Agency

The Problem

This creative agency took a careful approach to AI: each use required multi-level written approval, and AI output was kept out of client work. At the same time, staff saw real value in AI and were eager to use it. Leadership wanted a policy that protected client data while giving teams room to innovate, along with a clear view of how AI was being used across the company.

The Solution

• Mapped real AI use. An AI usage survey became a risk matrix of 16 use cases (5 Low, 6 Medium, 5 High), so the policy would reflect how people actually work.
• Delivered a governance framework. Our review set out the policy, approved tools, risk tiers and review paths, sized for a mid-market company.
• Strengthened the data foundation. A Microsoft 365 review identified sharing settings to tighten before AI tools scale.
• Trained the team. A one-hour AI Readiness session, about 75% safety and governance and 25% hands-on Copilot Chat, now recorded for new-hire onboarding.

The Results

• Approval scaled to risk. Low-risk use goes ahead without paperwork, and higher-risk use follows a simple review path.
• Fast, clear decisions. One named AI Owner, an IT lead with executive backup, keeps decisions moving.
• AI on company-approved accounts. A business AI account is approved for sensitive work, and individual accounts are being brought into it.
• A standard tool for everyone. Copilot Chat is the default, so there are fewer tools to support and train on.
• From “what’s allowed” to “what can we build.” The agency is now planning AI workflows, including finance dashboards and forecasting, a meeting knowledge base and a sales lead-generation agent.

Ready to put AI to work safely? Contact GadellNet’s AI Strategy & Adoption team about where to start.