In short
Start with governance before the tool: list the AI uses already in place, appoint an owner, set rules on personal data in line with Law 09-08, then choose one or two high-volume, low-risk use cases, with an outcome indicator measured before and after.
1. List existing uses
Staff often already use AI assistants, with no framework. A simple inventory (who, which tool, which data) reveals the immediate risks and the real needs.
2. Set the rules
An appointed owner, data banned from public tools, human validation of outputs, traceability. For personal data, apply Law 09-08: purpose, minimization, informing the people concerned.
3. Choose a first use case
Aim for a repetitive, high-volume task: sorting mail, standard replies, summarizing documents, searching internal texts. Avoid individual decisions about people at first.
4. Measure and extend
Measure lead time or quality before the project, then after three months. Extend only what has proven itself, while training the staff concerned.