Your firm scored a 47. Now what?

The Aday Interactive, Inc. AI Executive Readiness Assessment is a self-scored 0 to 100 diagnostic that maps a professional-services firm\'s AI posture across five domains: governance, sanctioned tools, staff exposure, vendor risk, and vertical-specific compliance. Takes 8 minutes. Produces a score. What we get asked most often after the score comes back is: OK, so what does a 47 actually mean?

This post explains the four bands. What each band scores against, what firms in each band typically do next, and how the band maps to a Fractional CAIO engagement. Anyone can take the assessment; this post exists so the number that comes back at the end is not just a number.

Band 1: Exposed (0 to 39)

The characteristic pattern: staff already use consumer AI tools; leadership has no visibility into what is being pasted where; there is no ratified policy; there is no sanctioned stack.

A firm at Exposed is not unusual and it is not embarrassing. It is the default posture for a professional-services firm that has not yet done its first governance pass. What it is, is materially risky. For law firms, Florida Bar Rule 4-1.6 (confidentiality) is on the line every time an associate pastes client-identifying detail into consumer ChatGPT. For concierge medical practices, HIPAA § 164.514 (de-identification safe harbor) is on the line every time a staff member drops a patient note into a general-purpose LLM. For wealth managers and RIAs, SEC Marketing Rule (206(4)-1) implications compound every time client-portfolio detail flows through an unsanctioned tool.

The wedge move for Exposed firms is risk containment, not capability. Typically that starts with the [Founder-Led Stack & Policy Audit](/pricing#custom-ai): a written 4-page memo naming the specific exposure, a sanctioned-stack recommendation for the vertical, and one vertical-compliance gap ranked by materiality. Firms that need faster containment go straight to the [AI Use Policy Kit](/pricing#custom-ai): a ratifiable firm-branded policy doc plus Sanctioned Tools list, ready for the partnership or board to adopt.

Band 2: Emerging (40 to 69)

The characteristic pattern: the firm has piloted some AI tools, possibly with an approved use case or two; there is loose informal guidance (an email that circulated once) but no ratified policy; staff use varies widely by team.

Emerging is the band where most professional firms sit today. Enough exposure to want structure, not enough to have structure. The pattern under HIPAA-adjacent practices is a common one. The practice manager approved Otter.ai for meeting transcription three months ago. Some physicians are also using ChatGPT informally for patient-education content drafts. No one has audited whether the Otter deployment covers the BAA (Business Associate Agreement) requirement. The physicians using ChatGPT think it is "just for drafts" and therefore fine.

The wedge move for Emerging firms is the [90-day CAIO Bootstrap](/pricing#custom-ai): a fixed-scope engagement that installs baseline governance (ratified policy, sanctioned stack, staff posture memo, one working copilot pilot). It is the shortest path from "we have piloted things" to "we have a system." Most Emerging-band firms move to Governed within one Bootstrap cycle.

Band 3: Governed (70 to 89)

The characteristic pattern: ratified AI Use Policy exists and the partnership or board adopted it; the Sanctioned Tools list is current and reviewed quarterly; staff training runs on a schedule; a compliance-stack audit has been completed for the vertical (Bar / HIPAA / SEC / fair-housing).

A firm at Governed is not "advanced" in the sense of shipping proprietary AI systems. But it is safe. Rule 4-1.6 exposure is closed. HIPAA § 164.514 is documented. SEC Marketing Rule implications are known and controlled. The firm can answer, in a partner meeting or a board review, exactly which tools are in use and why, and what the residual risk is.

For most 10-to-50-person professional-services firms, Governed is the goal, not Advanced. The maintenance shape is a [Signature-tier Fractional CAIO retainer](/pricing#custom-ai): 1 to 4 days of senior AI leadership per month, standard governance scope, monthly strategy call, quarterly policy audit. Signature tier is what keeps a Governed firm Governed.

Band 4: Advanced (90 to 100)

The characteristic pattern: the firm has a competitive AI thesis; proprietary systems are in production (internal RAG systems, custom copilots, ML pipelines specific to the firm\'s work); the compliance stack is audited by outside counsel; board-level AI reporting is a standing agenda item.

Advanced is not for every firm. It is expensive to reach and expensive to maintain. It is the right shape for a large firm with an in-house data team, a firm with a specific competitive AI thesis (e.g. an intellectual-property practice building proprietary prior-art search tooling), or a firm operating at a scale where the AI capability itself is a differentiator to clients.

The engagement shape at Advanced is either a scoped Custom AI project (defined-scope builds: copilots, RAG, ML pipelines, governance) or the [Estate-tier Fractional CAIO](/pricing#custom-ai): dedicated fractional executive, full compliance stack, board-level reporting, priority delivery cadence. Both are legitimate and both are what firms in this band typically run.

Reading the band the assessment returns

Two things to keep in mind about the number the assessment returns.

First, the band is a snapshot, not a destination. Firms that engage a Fractional CAIO typically move Exposed → Governed within 90 days of the CAIO Bootstrap. That is not because they became more sophisticated but because the governance was installed. Score movement between quarterly re-takes is the meaningful signal.

Second, the band interacts with vertical. A 46 (Emerging) at a law firm working criminal-defense matters is materially different from a 46 at a boutique brand agency. The exposure profile of the underlying work is different, and the compliance stack the CAIO installs is different. The assessment surfaces this and the follow-up conversation scopes it. See our [decision framework for the Fractional CAIO role](/blog/fractional-caio-vs-full-time-law-firm) for how firm size and vertical scope the engagement shape.

If you are reading this without having taken it

Take the [AI Executive Readiness Assessment](/assessment). It is free, self-scored, 8 minutes. The band the assessment returns will make more sense against the four descriptions above. If you land in Exposed or Emerging, the most common bands for firms that have not yet engaged this work, the next steps are named and the rungs are priced.