The bottleneck has a number. Almost nobody has worked it out.

Find out what your people are actually using, where client material goes when they use it, and whether each tool is set up and contracted the way you have been told it is. Most businesses cannot answer this, and increasingly their clients are the ones asking.

• Tool inventory: including the ones nobody told you about, with versions and account detail.
• Platform verification: whether your material stays inside a controlled environment, and whether the supplier is contractually restricted from training on it. Read from the agreement, not the marketing page.
• Data-flow map: where information physically goes, which country it lands in, how long it stays.
• A tool register, built and populated, plus an access and logging review.
• A written answer you can hand to a client, an insurer or a tender panel when they ask what you do with their material.

This is technical and operational work: it documents the facts, it does not interpret your obligations, and it is not legal advice. Regulated practices are the sharpest case for it — solicitors and tax agents carry duties about tools and client information that somebody has to establish the facts for — and those practices should have their own professional-standards adviser review the output before adopting it.

The workflows, and the front door when it is genuinely part of the problem. Built inside your own accounts, documented, with your team trained on it as part of the price rather than as an extra.

Nothing in this field stays still. Models get retired, vendors change their terms, people leave, and a tool that was fine in March quietly is not in September.

• Monitoring: workflows watched, failures alerted to a person rather than discovered by a client.
• One change a month: the small adjustments that otherwise never get made.
• The register kept current: tools added and retired, and changes to supplier terms flagged.
• Annual re-verification: the Verify work run again, so what you told your clients is still true.

Offered only after a build or a verification, never as a condition of anything, and cancellable monthly. If it stops earning its place, stop paying for it.