Step 2 · Embed governance
Clinical AI Safe Usage Launchpad™
The Diagnostic tells you where you stand. The Launchpad builds the governance baseline that closes the gaps, and gets it adopted by your board.
What you own at the end: a working AI governance baseline, the policies, registers, procedures and evidence your accountable officers need, adopted by your board or partnership, and built from your own Diagnostic findings rather than a template.
Four to six weeks. Scoped from your Diagnostic findings. Delivered remotely.
What the Launchpad is
The Diagnostic produces a documented position and a 30-day plan. It stops there, by design. It does not produce the policies, registers, procedures and evidence structures your accountable officers need in order to act on it.
The Launchpad builds those, from your findings, and takes them through to board or partner adoption. At the end you are not holding a report about what to do. You are holding the governance baseline itself, owned by the people accountable for it.
Who it is for
The Launchpad follows the Diagnostic. It is scoped from what the Diagnostic found, so a completed Diagnostic is the starting point.
It is the right next step for clinics with all three of:
- Red findings on the RAG Exposure Map
- No internal owner with both the authority and the time to close them
- A board or partnership that has accepted the 30-day plan
If you have a capable information governance lead and only Amber findings, you probably do not need this, and we will say so. We would rather lose the engagement than sell you a baseline you could have built yourself.
If you hold a governance baseline built elsewhere and want it extended rather than rebuilt, that is a separately scoped conversation.
How scoping works, and why it is done this way
One mechanism sets four things at once. Your Diagnostic findings determine:
- Whether you need the Launchpad at all, tested against the three points above
- Which artefacts your clinic needs from the full set below
- The timeline, within the four to six week window
- The fixed fee
None of those can be set before the findings exist. How many tools need governing, how many workflows need a documented oversight step, whether an ambient scribe is in the picture, how many sites and specialties are involved, and how much of a baseline you already hold: those are what the Diagnostic reveals, and those are what set the scope.
So the sequence is fixed. Findings first. Then scope, fee and timeline, confirmed in writing in a Statement of Work before you commit to anything. The fee does not change once work has started. That is the same discipline as the Diagnostic.
What it produces
A working governance baseline, owned and adopted by your accountable officers.
The artefacts below are the full set the Launchpad draws on. Which of them your clinic needs is determined by your Diagnostic findings and confirmed in the written Statement of Work before the engagement begins. They are grouped here by what each one answers.
Policy and registers: what is allowed, and what is in use
- AI Usage Policy
- AI Tool Register
- AI Risk Register
- Approved, Conditional and Prohibited Use Matrix
Patient-facing: transparency to the people whose data is processed
- Patient transparency materials: privacy notice wording, patient-facing explanation, team briefing, objection and dissent route
Clinical safety and oversight: the review step before AI output enters the record
- Human oversight procedure: the documented clinician review step before AI output enters the record
- Local DCB0160-style evidence structure for your Clinical Safety Officer's review, where applicable
- AI incident procedure
Data protection and vendor evidence
- DPIA readiness workpack, structured for your DPO to complete and sign
- Vendor evidence tracker
Staff
- Staff guidance and training material
Disclosure and board adoption: evidence for the people who ask
- MDO, PMI and insurer disclosure templates
- Board or partner sign-off pack: decision paper, risk acceptance log, and a 30, 60 and 90-day roadmap
- Inspection-ready evidence folder index
Why there is no price on this page
The other two services carry a number and this one does not. That is deliberate.
As the scoping section explains, the fee is set by your Diagnostic findings, and those do not exist until the Diagnostic is done. We could publish a figure and then move it once we had seen your clinic. That is common practice, and it is the practice our pricing position exists to reject.
A price that changes once the scope becomes visible was never a price. It was an opening position.
For planning purposes: the Launchpad is a substantial multiple of the Diagnostic fee, and typically a five-figure commitment. Once scoped, it is a fixed fee with a fixed timeline, confirmed in writing before you commit, and it does not change once work has started.
Payment: 50% on signature, 25% at midpoint, 25% on final readout. Invoices are payable within 14 days. All fees are exclusive of VAT.
How we deliver
Delivered remotely
The Launchpad is delivered remotely, as every ELSA AI engagement is. The work is drafting, structuring and reviewing governance artefacts with your accountable officers, and taking them through to adoption. That is done properly on a call and in a document. An onsite presence would not make it better.
Founder-delivered
Every engagement is delivered personally by Faisal Ali, AAISM, CISM, CRISC, Founder and Principal Consultant, ELSA AI. There is no junior delivery team, offshore handover or reseller involvement in delivery. Faisal brings more than two decades in cybersecurity, information risk and governance across healthcare, financial services and national infrastructure, and holds AAISM, CISM, CRISC and CISSP.
What the Launchpad is not
ELSA AI provides advisory governance support only. The Launchpad does not include:
- Legal review or legal sign-off
- DPIA completion or signature
- Clinical safety case authorship or sign-off, DCB0160 authorship, or appointment as your Clinical Safety Officer
- Technical implementation, tenant configuration or security testing
- Medical device or SaMD classification
- Regulatory submissions on your behalf
- CQC, ICO or NHS approval
- Insurer coverage, underwriting or MDO indemnity decisions
- Certification or any guarantee of compliance
ELSA AI builds the artefacts and structures the evidence. DPIA conclusions, indemnity disclosures, regulator engagement and adoption decisions remain with your DPO, legal counsel, Clinical Safety Officer, accountable officers, insurer-facing teams and clinicians.
We say what we found, what it means and what to do about it. You decide, and you adopt.
What follows
Ongoing evidence currency is available through the AI Exposure Sentinel™ at £950 per month, £2,850 per quarter in advance, or £10,500 per year prepaid, + VAT. Annual prepaid is preferred.
A baseline reflects your position on the day it was approved. Then a clinician trials a new tool, a supplier changes its terms, your practice manager leaves, an insurer asks a new question. The Sentinel keeps the baseline current.
The next step
Most clinics arrive at the Launchpad through the Diagnostic readout, where the findings make the case or fail to. If you have not run a Diagnostic yet, start there.