The consulting firm that can say yes or no faster than its peers wins the engagement, the relationship, and the premium – and most firms are losing the race to their inboxes. The information needed to make a fast, confident decision is scattered across email threads, spreadsheets, and individual memory. The gap between firms that can move fast and those that can’t comes down to their risk management operating model.
The cost of running on email and memory
Ask most consulting firm leaders how they manage conflicts of interest, and the honest answer sounds something like this: a broadcast to a group inbox, a few manual checks, a reply from whoever reads the email and chooses to reply, and a decision documented nowhere. No audit trail. No risk scoring. No enforcement mechanism. The system works until it doesn’t, and by the time it doesn’t, the damage is usually done.
This is today’s typical operating model across the consulting industry. Firms processing tens of thousands of conflict checks per year do so with small teams, working against tight turnaround commitments, with no automated triage and no way to prove what decisions were made and why. When clients ask, the answer is institutional memory and an Outlook search.
Leaders at firms of varied sizes recognize the same uncomfortable reality: they cannot say with confidence that they are managing their conflict commitments to clients effectively. The exposure is understood.
What makes the moment urgent is that the consequences are accelerating. Firms are growing through acquisition and organic expansion into new geographies and service lines. Each new client, hire, and office compounds what one risk leader described as the compliance debt: commitments made to clients and counterparties without a system capable of tracking or proving them. Manual processes that stretched to cover 500 clients don’t scale to 1,500. And for PE-backed firms, the pressure is even sharper: investors are applying intensifying scrutiny on operational efficiency and margin performance, and a risk and compliance function running on email and memory doesn’t survive that level of examination.
Risk as a strategic framework
Think about how sophisticated investors approach portfolio construction. They don’t evaluate each position in isolation. They start with a strategy, define which risks are worth taking, structure holdings to match that posture, and monitor continuously. When the picture shifts, they adjust. Higher risk must produce higher return. When it doesn’t, that’s a signal something is wrong.
The same logic applies to consulting firms. While real regulatory obligations exist in specific areas – anti-corruption frameworks, financial services regulations where applicable, government procurement ethics rules, and data protection requirements – the governance of conflicts of interest, client acceptance integrity, and information barriers rests primarily on the firm’s own internal systems. When those systems are weak, risk exposure builds invisibly. The consequences, when they arrive, are severe precisely because no one saw them coming.
The leading firms have moved risk upstream. They evaluate conflict exposure and client integrity before a pursuit, not after weeks of relationship investment. Risk informs which clients to develop, which sectors fit the firm’s appetite, and which opportunities to pass on. It’s how they decide whether to open a conversation, not a box to check when the deal is ready to close.
What confident decisions require
Saying yes quickly and confidently starts with a unified view of clients across the portfolio: who they are, what relationships exist, where conflicts or reputational exposure arise. That view only matters if it updates in real time, surfacing emerging risks, new conflicts, and delivery-capacity constraints well beyond the intake stage. But data alone doesn’t make the decision. With a defined risk appetite – a clear statement of when a firm will and won’t take on new business – the firm can ensure that decisions are consistent across opportunities and partners.
The earlier risk intelligence enters the engagement lifecycle, the better. Connecting risk data to business development activities in CRMs like Intapp DealCloud means evaluating client fit and potential conflicts before significant relationship investment has been made. A pre-check conflict search before a first meeting costs almost nothing. The same search after six weeks of pursuit, a pitch, and a proposal carries a real cost of wasted time and a frustrated client if the answer is no.
Intapp Intake and Intapp Conflicts address the most friction-prone steps in client acceptance. Intake replaces unvalidated free-text forms and manual back-and-forth with dynamic, pre-populated questionnaires that capture complete, accurate information from the outset and allow for comprehensive risk assessment and alignment to firm’s strategy. Conflicts replaces email-based checks with automated search strategies, corporate tree matching, AI-driven triage that scores and filters results, and a complete audit trail of every decision. Intapp Employee Compliance extends oversight to individual-level obligations.
Intapp Walls, when connected to the rest of the firm’s conflicts and risk systems, dynamically enforces ethical walls across the firm’s document management, financial management, and service delivery environments in real time. This is the operational difference between having a wall and being able to prove the wall is working. As AI tools become embedded in firm operations, this enforcement extends to agent actions, ensuring AI operating within the firm respects the same ethical walls, firm rules, and confidentiality obligations that apply to humans.
The results from firms that have made this transition are concrete. A firm cuts the time it spends on conflict case clearances, accelerates business acceptances, and spends far less time on reviews overall. These are competitive advantages in the speed at which a firm pursues and wins the right business.
Firm AI:the operating layer that matters
Consulting firms have spent the past two years pointing AI at individual work, and it has delivered: analysts summarize documents in minutes, consultants turn meeting notes into first drafts, proposals come together faster. And yet the firm’s economics haven’t moved because they still face the same margin pressure, staffing constraints, and administrative drag they had before generative AI arrived.
The reason is that AI has been applied to the practice of the firm, helping individual practitioners work faster on client deliverables, but not yet applied to the business of the firm: the intake, risk assessment, conflicts, and monitoring processes that determine which work gets taken on, how risk is controlled, and how the firm scales. Faster document summarization doesn’t close a missed conflict. Faster proposal drafting doesn’t create an audit trail.
The operational bottleneck in risk management sits in the volume of pre-analysis work: constructing search strategies, matching corporate trees, screening against sanctions lists, documenting every decision. That’s where the time goes, and that’s where AI creates the most leverage.
The agentic opportunity
Intapp Celeste is an agentic AI platform where expert agents evaluate a new prospect for strategic fit, construct search strategies, run conflict searches, triage results, generate compliance summaries, monitor active engagements for emerging risks, and route decisions to the right people. Human experts focus on the high-risk cases that require human judgment.
What sets Celeste apart is the combination of industry best practices built into its playbooks and the flexibility to configure those playbooks to each firm’s specific policies, processes, and decision logic. Celeste knows your firm’s data, terminology, relationships, and work patterns – which allows agents to apply your firm’s risk tolerance thresholds and compliance policies, rather than a generic model’s guess at them. Every agent action is permissioned and auditable, and the firm sets which decisions require human sign-off.
Because Celeste’s playbooks are pre-built for your firm’s workflows, individual users don’t have to design and prompt processes from scratch each time. That consistency has practical benefits: it prevents inefficient AI token consumption across the firm and ensures every compliance interaction is grounded in the firm’s own standards rather than improvised by whoever happens to be running the task.
One point on sequencing: agentic AI amplifies what already exists. Compliance is, in large part, a manual, repeatable process. Few functions across the firm are riper to reap the benefits of applying agentic AI to run with greater efficiency, speed, and accuracy. The path is clean, connected data first, then structured processes, then agentic AI to automate and amplify end-to-end. Firms that build the foundation now, by implementing interconnected risk and compliance capabilities, will be ready to move on AI quickly. The firms that don’t will waste time and money retrofitting later.
How much of your firm’s decision-making friction today is driven by genuine strategic complexity, and how much by incomplete, disconnected data? The answer points directly to the opportunity.
Learn more about how leading consulting firms are closing the visibility gaps across clients, engagements, and risk.