Add-on service
Sector-specific compliance playbooks
The UK has no single AI law. Your existing regulator applies its own rules to AI, which is why generic AI policies fail the moment a sector regulator asks a specific question. Each playbook translates one regulator's expectations into documents you can use.
Best for: Regulated or client-audited businesses that need their AI documentation to speak the language of their own regulator.
What's included
- Sector-tailored AI usage policy with the clauses your regulator expects
- Risk classification guidance for the AI tools common in your sector
- A regulator-mapped checklist referencing the actual published guidance
- Model wording for client and candidate transparency notices
- Worked examples of what good and bad look like in your sector
- Board or partner briefing note, one page
Recruitment and HR
CV screening, ranking and video interview tools are the clearest example of AI that can produce a legally significant decision about a person. The recruitment playbook covers EHRC equality duties, ICO expectations on automated decision-making under UK GDPR Article 22, candidate transparency wording, bias monitoring you can actually run, and the human review step that has to be more than a rubber stamp. It also flags where the EU AI Act treats employment screening as high risk for UK firms hiring into the EU.
Legal and professional services
Client confidentiality is the binding constraint. This playbook covers SRA and ICAEW expectations on technology and client data, what may and may not be pasted into a general-purpose AI tool, engagement letter wording on AI use, supervision of AI-assisted drafting, and file-note practice so AI-assisted work is auditable years later.
Retail and consumer
Personalisation, dynamic pricing, chatbots and fraud scoring all touch consumer protection as well as data protection. Covers CMA expectations on pricing and dark patterns, ICO guidance on profiling, transparency in chatbot interactions, and how to document a recommendation engine so you can explain it if challenged.
Healthcare and finance
The two most heavily supervised sectors get the most specific treatment. Healthcare covers MHRA software-as-a-medical-device boundaries, clinical safety documentation and patient data handling. Financial services covers FCA Consumer Duty implications of AI-driven decisions, operational resilience, model governance proportionate to an SME, and the outsourcing questions your regulator will ask about your AI vendors.
Common questions
Which sectors are available now?
Recruitment and HR, legal and professional services, retail and consumer, healthcare, and financial services. If your sector is not listed, tell us — we build new playbooks in response to demand and will quote for a bespoke one.
Are the documents editable?
Yes. Everything is supplied in an editable format with notes explaining what to change and why each clause exists, so your own adviser can review it quickly.
Not sure which you need?
Run the free AI register first — it takes about ten minutes and usually makes the answer obvious. Or tell us what you're dealing with and we'll point you at the right thing.
Not legal advice. Trestano provides governance tooling, documentation and practical guidance. It isn't a substitute for advice from a qualified solicitor or your own compliance team.