AI Consulting for Government
Independent advice for Australian councils and agencies. Your citizens cannot take their business elsewhere — which is exactly why the assurance work comes before the deployment, not after it.
Nobody Can Take Their Business Elsewhere
That single fact makes public sector AI a genuinely different discipline from the private sector version, not a more cautious one.
A retailer running an AI system that fails 5% of the time has a service problem and some unhappy customers, who can go elsewhere. An agency running a system that fails 5% of the time has failed 5% of people who had no alternative provider, no ability to walk away, and quite possibly no capacity to absorb the consequence. The same failure rate, radically different meaning.
Administrative decisions are also contestable by design. A person affected by a decision is entitled to understand its basis and to challenge it, and “the model produced it” is not an answer to an internal review, an ombudsman or a court. That is not a compliance overhead bolted onto the technology — it is a design constraint that determines what architecture is even permissible. Explainability retrofitted to a deployed system is expensive and usually incomplete; designed in from the start it is close to free.
And the legitimacy cost is asymmetric. A company that gets it wrong loses customers. An agency that gets it wrong damages trust in government itself, and that damage is slow to repair and does not stay inside the agency that caused it. Every Australian public servant already carries the reference point here, and its central lesson was never technological: it was what happens when an automated process operating at scale meets an inadequate legal foundation and no meaningful human review. That lesson outlives any particular technology.
None of which means do nothing. It means the sequence is different: assurance first, then the boring internal work, and only then — if ever — a conversation about anything touching an outcome for a person. See our services for how we scope that.
What Every Assurance Framework Converges On
The instruments differ by jurisdiction and portfolio. Their demands do not differ much at all.
Know Where AI Is Actually in Use
Almost every agency underestimates this, because business units adopt tools as productivity experiments and nobody tells governance. The first deliverable in most public sector engagements is an honest inventory, and it is usually more surprising than anyone expected.
Assess Risk Proportionately, Before Deployment
The frameworks are far less onerous applied at the start than retrofitted to something already live. Proportionate means proportionate: a tool that drafts internal minutes does not need the assessment that a tool touching an entitlement does — and conflating the two produces paralysis.
A Named Human Remains Accountable
Not a review step on a diagram — a person who made the decision, understood the basis for it, and can explain it. Nominal review is worse than none, because it manufactures a record of care that will not survive contact with an ombudsman.
Transparency and Contestability
The public should be able to know AI was involved, and a person affected should be able to understand and challenge the basis of a decision. This is an architecture requirement, not a communications one — it decides what systems you can lawfully use.
Australian governments have developed assurance instruments including a national framework for the assurance of AI in government and jurisdiction-specific frameworks. Which binds you depends on your jurisdiction and portfolio, and they are updated — confirm the current applicable instrument through your own governance area rather than a consultant’s website, including this one.
Where the Work Is, and None of It Decides Anything About Anyone
Six areas we assess in councils and agencies. Collectively they represent years of administrative load most bodies have never touched.
Routine Public Enquiries
Bin days, permit requirements, opening hours, which form for what. The answer is published policy, the volume is enormous, and no outcome is being decided.
- Answers only from published policy, citing the source
- Says it does not know rather than improvising
- Hands to an officer without the resident repeating themselves
- A human route always remains available on request
Correspondence Triage and Routing
Classifying and routing inbound volume before an officer opens it. The sorting is the value; nothing is answered autonomously.
- Classifies by subject, urgency and responsible area
- Escalates statutory timeframes and complaints immediately
- Never responds to a member of the public autonomously
- Cuts time-to-first-officer-eyes measurably
Policy and Procedure Retrieval
The answer already exists, written down, somewhere across thousands of documents nobody can search at the moment they need it.
- Plain-English search across your own corpus
- Cites the source document and clause, always
- Answers from your material, not general knowledge
- Improves consistency of officer advice
Form and Application Data Extraction
Extracting and structuring what was submitted, so an officer can assess it. The extraction is automated; the assessment is not, and must not be.
- Structures submitted data with a confidence score
- Low-confidence extractions go to a person
- The officer assesses — the model never does
- Full record of input, output and approver
Report Packs and Minutes
Council and committee papers assembled by hand from things the systems already hold, consuming officer weeks every cycle.
- Assembles from source systems on the meeting cycle
- Drafts minutes for the officer to correct and approve
- Records captured as public records by design
- Frees officers for the work that needs judgement
Internal Service Desk
Staff asking staff questions with published answers. Entirely internal, no citizen outcome involved, and a good place to prove the operating model.
- Answers internal process questions from your documents
- Reduces load on corporate services teams
- Low stakes — a good first proving ground
- No personal information of members of the public involved
The Part Everyone Forgets: It Is All a Public Record
Records obligations do not have an exception for automated processes, and retrofitting record capture is one of the more expensive mistakes available.
- If an AI system contributes to the conduct of public business, the record of what it did is a public record — with the same creation, capture, retention and disposal duties as anything else.
- That can mean capturing prompts and outputs, not just the final decision, because the basis of a decision is part of the record of it.
- The version of the system that produced a given output may need to be identifiable years later. Vendors who silently update models under you make that impossible.
- The whole trail needs to be discoverable under FOI. A vendor architecture that cannot produce it has disqualified itself regardless of model quality.
- Retention and disposal must follow your authority, not the vendor’s default retention setting or their commercial preference for keeping everything.
- None of this is expensive to design in at the start. All of it is expensive to add afterwards, which is the entire argument for doing the assessment first.
Records duties arise under the Archives Act at the Commonwealth level and equivalent state legislation. We are not your records authority — confirm your specific obligations with them before, not after, a deployment.
How We Work With an Agency or Council
Diagnosis separated from delivery — which also happens to produce a specification your procurement can actually use.
Free Initial Consultation
Where does the administrative load sit, and what does your governance posture permit? A conversation, not a demonstration. If the honest answer is that you need an inventory of existing tool use before anything else, that is what we will tell you.
AI Opportunity Audit (~$3,000)
A written map of workflows, systems and data, with the privacy, records and assurance constraints on each, and a ranked shortlist — separated explicitly into work that does and does not affect outcomes for a person. It also produces a specification that describes your problem rather than a vendor’s product.
Prove It on Internal Work First
Build the highest-value internal workflow into production, with records capture designed in, a named accountable officer, and an audit trail throughout. Prove the operating model where nobody’s entitlement is at stake before contemplating anything where one is.
Related Reading
The neighbouring regulated environments, and the questions to put to anyone pitching you.
Financial Services
The other sector where explainability is an engineering requirement rather than a nice-to-have.
Read moreHealthcare
Public health services face both regimes at once — the privacy standard and the assurance standard.
Read moreChoosing a Consultant
The checklist and the red flags — useful when writing a specification as well as when assessing responses.
Read moreFrequently Asked Questions
What executives, CIOs and governance areas ask before anything is approved.
Three things, and they compound. First, you cannot choose your customers. A retailer with an AI system that fails 5% of the time has a service problem; an agency with a system that fails 5% of the time has failed 5% of people who had no alternative provider and no ability to walk away. Second, decisions are contestable by design — administrative law expects a person affected by a decision to be able to understand the basis for it and challenge it, which means "the model produced it" is not an answer to a review, an ombudsman or a court. Third, the legitimacy cost is asymmetric: a private company that gets it wrong loses customers, while an agency that gets it wrong damages public trust in government itself, and that damage is slow to repair and not confined to the agency responsible. Robodebt is the reference point every Australian public servant already has, and its central lesson was not technological — it was about what happens when an automated process at scale meets inadequate legal foundation and no meaningful human review. That lesson survives whatever the technology is.
The internal and the informational, which together represent an enormous amount of work. Answering routine public enquiries where the answer is published policy — bin days, permit requirements, opening hours, what form is needed for what. Triaging and routing inbound correspondence. Drafting for officer review. Searching your own policy and procedure corpus so staff can find the answer that already exists. Extracting data from forms and applications for an officer to then assess. Preparing report packs. Meeting minutes. None of that determines an outcome for a person. The line is bright and worth holding: the moment a model influences whether someone gets a permit, a payment, a service or an enforcement action, you have entered automated decision-making, and that carries transparency, contestability, review and record-keeping obligations that must be designed in from the start. Most agencies have years of the first category available and have not touched it.
Australian governments have developed assurance frameworks for AI use in the public sector, including a national framework for the assurance of AI in government and jurisdiction-specific instruments such as New South Wales’ AI assessment framework. They differ in detail but converge on the same demands: know where AI is being used, assess risk proportionately before deployment rather than after, be transparent with the public about it, keep a human accountable for decisions, and be able to explain and review what happened. Which framework binds you depends on your jurisdiction and portfolio, and they are updated — so the current applicable instrument is something to confirm with your own governance area rather than take from a consultant’s page, including this one. What we would add from practice: the frameworks are less onerous than people fear when applied at the start, and close to unworkable when retrofitted to something already deployed. The cost of assessing early is a fraction of the cost of unwinding late.
This is the part most often forgotten and it is genuinely important. Public sector records obligations — under the Archives Act at the Commonwealth level and equivalent state legislation such as Victoria’s Public Records Act — do not have an exception for automated processes. If an AI system contributes to the conduct of public business, the record of what it did is a public record, subject to the same creation, capture, retention and disposal duties as anything else. That has concrete design consequences: prompts and outputs may need to be captured, the version of the system that produced a given output may need to be identifiable, and the whole trail needs to be discoverable under FOI. A vendor whose architecture makes that impossible has disqualified themselves regardless of how good the model is. It is also worth thinking about before deployment because retrofitting record capture to a system never designed for it is one of the more expensive things we see agencies attempt.
It works, but the sequencing matters and it is where councils in particular get stuck. Agencies must procure through the applicable rules and panels, with value-for-money and probity obligations attached, and that is not a barrier to good AI work — it is a constraint on how it is scoped. The practical difficulty we see is that agencies often go to market before they have diagnosed the problem, which produces a specification written from a vendor’s marketing rather than the agency’s need, and then a panel of vendors who all answer that specification faithfully. Separating the diagnosis from the delivery is usually the fix: a small, properly scoped piece of independent assessment work produces a specification that describes your actual problem, and the subsequent procurement gets you something you can use. We are a small independent firm, not a panel behemoth, and there are engagements we are the wrong size for — we will say so rather than shape ourselves to fit a procurement we should not be in.
A free initial consultation to start — a conversation about where the administrative load actually sits and what your governance posture permits, not a demonstration. If there is a real opportunity, the next step is generally the AI Opportunity Audit at around $3,000: a written map of your workflows, systems and data, the privacy, records and assurance constraints attached to each, and a ranked shortlist with realistic effort and payback, separated explicitly into work that does and does not affect outcomes for a person. That separation is the most valuable page in it for a public sector body. You keep the audit either way, including the recommendations to do nothing. To be explicit about our limits: we are AI consultants. We do not certify your compliance with any assurance framework, privacy legislation or records duty, and we would be suspicious of anyone who offered to.
Assurance First, Then the Boring Wins
The initial consultation is free and diagnostic. Call +61 3 9999 7398 or email hello@ai-consulting.au. Melbourne-based, working with agencies and councils Australia-wide.