Guide
How to hire an AI automation consultant in the UK
Harrowtech.ai · last checked 13 October 2026
An AI automation consultant is someone you pay to find the jobs in your business that a machine can do, and then set that up. This guide covers what the job title means, what to ask before you hire one, and what the written contract should cover when they handle your customers’ data.
It is not legal advice and it does not rank consultants. Nobody has published a standard rate card or a standard scope for this work that we could find, so we do not claim one.
What the titles mean
There is no protected title. “Consultant”, “engineer” and “specialist” are used loosely, so read the work described rather than the label. The National Careers Service gives the nearest official description, for a data scientist, which lists “machine learning engineer” and “data engineer” as alternative titles. Its list of day-to-day tasks includes:
- “set up automated data systems to transform business processes”
- “make sure information management meets data security and quality standards”
- “explain to different audiences how AI and data science can benefit their organisation”
That profile describes an employee role, not a freelance consultant. It is still a useful checklist of the three things you are buying: building the system, handling your information properly, and explaining it in terms you understand. The page lists maths, statistics and computing routes in, and shows no date, so treat it as background, not a licence requirement.
Six questions to ask before you hire
- Which one job will you start with, and what does done look like? A good answer names a task and a result you can check. A vague answer about “transforming the business” is a reason to keep looking.
- Where will the finished automation live? If it sits in the consultant’s account, you depend on them for ever. Ask for it in your account, documented, in your name. The government’s SME Digital Adoption Taskforce report lists service lock-in and unclear switching costs among small business concerns; our summary of that government report has the quotes.
- Who sees my customer data, and are you a processor? The ICO defines a processor as a body that “processes personal data on behalf of the controller”. You, as the controller, remain responsible for it. Our guide to AI automation and GDPR covers what that means in practice.
- What security standard do you work to? The NCSC describes Cyber Essentials as “the minimum standard of cyber security recommended by the Government for organisations of all sizes”, built on five controls: firewalls, secure configuration, security update management, user access control and malware protection. The NCSC’s supply chain page says it “provides a tangible, efficient way” to gain assurance about suppliers, and also that it is not designed for high-assurance national security needs. Asking whether a consultant holds it is a fair, checkable question.
- What happens when it goes wrong? Ask who fixes a broken workflow, how long that is free for, and what the hourly rate is afterwards.
- What will I pay for outside your fee? Software subscriptions and AI usage fees often come on top. Our guide to what AI automation costs lists the parts.
How the work is usually set up
An automation consultant may end up handling your customers’ details: names in your inbox, contacts in your CRM, orders in your accounts. Where they do, the ICO says the arrangement goes in writing: “every time a controller uses a processor to process personal data, there must be a written contract that binds the processor to the controller”. Its guidance lists what that contract must cover at a minimum:
- the subject matter and duration of the work, its nature and purpose, the type of personal data and whose it is, and your own obligations and rights;
- that the consultant acts only on your documented instructions, which the ICO says can be given in any written form, including email;
- a duty of confidence for anyone who handles the data, and appropriate security measures;
- your prior written authorisation before they pass the work to a sub-processor;
- help with requests from the people whose data it is, and with your own data protection duties;
- deleting or returning the data when the work ends, and allowing audits and inspections.
The ICO adds that these are the minimum and both sides can agree further terms. Hold any consultant’s terms up against this list, then against the six questions above for the commercial side. The ICO says this guidance is under review after the Data (Use and Access) Act.
How Harrowtech scopes a job
We start with a free 30-minute first session and a fixed written quote, and a first automation starts from £950, with no deposit on a first small project under £3,000.
The rest of our process, the payment terms and what happens after go-live are set out on our AI automation service page.
What this guide does not cover
It does not compare named consultants, give market day rates, or cover hiring an in-house AI engineer. It also does not tell you which tool to choose; AI automation tools compared looks at three. For the wider background, see what AI automation is and our AI automation service, or return to all guides.
Sources
- National Careers Service, Data scientist (no date shown), read 13 October 2026
- ICO, What are controllers and processors? (last updated 29 September 2023, under review), read 13 October 2026
- NCSC, Cyber Essentials overview (no date shown), read 13 October 2026
- NCSC, Supply chain security (no date shown), read 13 October 2026
- ICO, When is a contract needed and why is it important? (under review), read 13 October 2026
- ICO, What needs to be included in the contract? (under review), read 13 October 2026
- Harrowtech’s own process and prices: harrowtech.ai pricing and FAQ