What Is an AI Foundation Audit? Definition for SMBs
An AI Foundation Audit is an AI opportunity assessment that scores every process on ROI, suitability and risk to rank an SMB's top three automation wins.

An AI Foundation Audit is a structured AI opportunity assessment that inventories a company's repeatable processes, scores each on ROI, suitability and risk, and ranks the top three worth automating first. It is the productised assessment easyAI runs for small and mid-sized businesses — the evidence to decide where AI pays back before any budget is committed.
Quick Answer. An AI Foundation Audit is easyAI's productised AI opportunity assessment. A guided 40–90 minute wizard captures how each repeatable process runs; the method scores every process on ROI, suitability and risk, ranks the top three, and delivers a phased implementation roadmap within 24 hours. It is a prioritisation assessment, not a certification.
Summary
What an AI Foundation Audit is — evidence before you spend on AI │ ├─ What it is │ ├─ A fixed-scope AI opportunity assessment, productised │ └─ Built for SMBs — no data-science team needed to run it │ ├─ How it runs │ ├─ Guided wizard, 40–90 min — how each process works │ ├─ Scores every process — ROI, suitability, risk │ └─ Ranks and names your top 3 automation wins │ ├─ What you get │ ├─ A phased implementation roadmap, delivered in 24 hours │ ├─ Two reports — one for the board, one for IT │ └─ Money-back if no measurable saving is found │ └─ What it is not ├─ Not a certification or a compliance audit └─ Not legal or financial advice — a prioritisation call
Where the term comes from
The AI Foundation Audit sits inside a broader discipline — the AI opportunity assessment: a structured way to decide which processes to automate before committing budget. The name reflects the job. It establishes the evidence foundation for a company's AI roadmap, so the first or next AI investment is chosen on data rather than on the loudest voice in the room or the last product someone saw demoed.
The discipline exists because selection, not technology, is where most AI money is lost. MIT's 2025 study of enterprise generative AI found roughly 95% of pilots delivered no measurable profit impact, with the barrier described as organisational rather than technical [1]. OECD research finds the binding constraints on AI for smaller firms are skills and knowing where to start, not access to tools [2]. An assessment that ranks opportunities first is the cheapest defence against funding the wrong process.
easyAI productised that assessment into a fixed-scope engagement so a 50-to-500-person business can run it without a data-science team. Adoption is now mainstream — 78% of organisations reported using AI in at least one business function in 2024, up from 55% a year earlier [3] — but McKinsey finds most are still early in capturing value, because the organisational work of choosing and sequencing lags the technology [4]. The audit is built to close that gap at the front of the project, not the post-mortem at the end.
What an AI Foundation Audit includes
An AI Foundation Audit runs as a short pipeline with four moving parts. The diagram below shows how a business's processes flow from intake to a ranked decision.
In words, the pipeline works like this:
- Intake. A guided 40–90 minute wizard captures how each repeatable process runs — its volume, the time it takes, how rule-bound it is, and what an error costs.
- Scoring. Every process is scored on the same three lenses: ROI (the size of the prize), suitability (how cleanly AI can take part of it over), and risk (the cost of getting it wrong). The three combine into a single comparable number, read as ROI plus suitability, minus risk — the Agent Opportunity Score.
- Ranking. The processes are ranked by that score and the top three surface as named opportunities; the rest are plotted for a later cycle, so nothing is discarded.
- Output. You receive a phased implementation roadmap and two reports — a board-level Executive Report and an IT-level Implementation Brief — delivered within 24 hours, backed by a 100% money-back guarantee if no process with measurable savings is found.
The audit deliberately stops at the level of which process to solve first. It does not pick a vendor or write code — that sequencing decision is the foundation the rest of the roadmap is built on.
Common use cases for UK/EU SMBs
Choosing where to start. A firm knows AI could help but has a dozen candidate processes and one budget. The audit ranks them so the first project is the one with the fastest, most defensible payback — not the one a department head argued hardest for at the last meeting.
Settling an internal debate. Finance wants invoice processing automated, operations wants order handling, and support wants ticket triage gone. The audit scores all three on the same basis, turning three confident opinions into one ranked, comparable answer that the team can act on.
Before a build-or-buy decision. Committing to build or buy a tool for a process only makes sense once you know the process is worth automating at all. The audit establishes that first, so the build-versus-buy call is made against evidence rather than a hunch.
Building a board or investor case. When leadership needs to justify AI spend, a ranked list with ROI, suitability and risk for each process — plus a phased roadmap — gives the board numbers to interrogate rather than a vendor's promise to trust.
AI Foundation Audit vs adjacent assessments
The word "audit" invites a few reasonable confusions. Here is how the AI Foundation Audit differs from the assessments it is most often mistaken for.
| Assessment | The question it answers | How it differs from an AI Foundation Audit |
|---|---|---|
| AI opportunity assessment | Which processes pay back if automated, and in what order? | The AI Foundation Audit is a productised AI opportunity assessment — the same discipline delivered as a fixed-scope engagement with named reports and a guarantee. |
| AI readiness assessment | Is the organisation mature enough for AI — data, skills, governance? | Readiness is a maturity verdict; the audit is a ranked action list. The two are complementary, not the same. |
| Compliance or financial audit | Do the accounts or controls meet a required standard? | An assurance audit gives an opinion against a standard. The AI Foundation Audit gives no assurance opinion — it is forward-looking prioritisation, not verification. |
| Certification | Does a system conform to a named standard? | The audit certifies nothing and issues no conformity statement. It ranks opportunities; it does not attest compliance. |
Read plainly, "audit" here means a systematic review of your processes to find and rank opportunity — not an assurance engagement. An AI Foundation Audit is not legal, financial or compliance advice, and running one does not make a company compliant with any regulation.
When an AI Foundation Audit makes sense for your SMB
An AI Foundation Audit fits a business that has several repeatable processes and is weighing its first or next AI investment — typically a 50-to-500-person SMB where operations, finance and IT each own processes that could be automated, but no one has ranked them on the same basis. It is most useful before budget is committed, when the real question is "which process, and in what order?" rather than "which tool?".
It is less useful in two cases: when there is a single obvious process and a very small team — score it informally and move on — or when the target process is broken or undocumented, in which case fixing or simplifying it comes first, because automating a broken process just produces a poor outcome faster. For the full method behind the ranking, start with our cornerstone on an AI opportunity assessment for SMBs; to see where the audit's output leads, our AI strategy framework for SMBs sets the multi-quarter context.
Related insights
- AI Opportunity Assessment for SMBs — the parent method the audit productises.
- What Is the Agent Opportunity Score (AOS)? — the score behind the top-3 ranking.
- AI Strategy Framework for SMBs — where the audit's roadmap fits in a multi-quarter plan.
- AI Implementation Roadmap for SMBs — turning the ranked opportunities into a delivery plan.
Last updated: July 2026. Version 1.0.
Frequently Asked Questions
What is an AI Foundation Audit?
Is an AI Foundation Audit the same as an AI opportunity assessment?
Is an AI Foundation Audit a compliance or financial audit?
How long does an AI Foundation Audit take and what do you receive?
Do you need a data team to run an AI Foundation Audit?
How is the top 3 chosen?
Sources
- 1.The GenAI Divide: State of AI in Business 2025 (MIT Project NANDA) — MIT Project NANDA — reported by DX · 2025
- 2.AI adoption by small and medium-sized enterprises — OECD · 2025
- 3.Artificial Intelligence Index Report 2025 — Stanford University, Institute for Human-Centered AI (HAI) · 2025
- 4.The state of AI: How organizations are rewiring to capture value — McKinsey & Company (QuantumBlack) · 2025
Want this run on your business?
AI Foundation Audit — a structured assessment of your AI footprint: integration risks, governance gaps, ROI opportunities. Delivered as a comprehensive report you can act on.
You receive your Executive Report and Implementation Brief — tailored to your business and delivered immediately.
