Right now, staff are pasting who-knows-what into whatever tool they found, and no one’s written down what’s allowed. AI Strategy & Governance sets the rules before that becomes a problem: who can use what, how your data stays protected, how decisions get made as you grow, and how you stay compliant with Canadian privacy law.
For organizations across Canada. Delivered remotely. Scoped to you.
areas
Policy, data, roles, risk, compliance
Compliance readiness built in
Rules a new hire understands day one
The tools aren’t the danger. Using them with no rules is. Client data goes into a chatbot nobody vetted. Two departments give customers opposite guidance on what’s allowed. A decision gets made off an AI answer no one checked. None of it is malicious, and all of it is happening right now in organizations that never sat down and decided how AI gets used.
The longer that goes unaddressed, the harder it is to walk back. Governance is how you get ahead of it: clear rules, set once, that let your team use AI with confidence instead of guessing.
Strategy and governance is the rulebook your organization works inside. Not a binder no one reads, a short, plain-language set of decisions everyone can actually follow: what AI is for here, what’s off-limits, who owns which call, and how you prove you’re handling data responsibly.
I build it around how your organization actually runs, not a generic template. You end up with something specific enough to use on Monday and clear enough that a new hire understands it on day one.
A short, plain-language policy your team and, where it matters, your clients can actually follow: what AI is approved for, what isn’t, and where to check when it’s unclear.
Clear rules for what data can go into which tools, so sensitive and client information stays protected instead of ending up somewhere it shouldn’t.
Who’s allowed to use what, who signs off on new tools, and who owns the call when AI is involved in a decision, so accountability is set, not assumed.
A simple way to catch where AI could go wrong before it does, with review steps on the decisions that carry real weight, sized to your organization.
Your AI use lined up with Canadian privacy law (PIPEDA today, and the incoming AI-specific rules under Bill C-27), so you’re ready instead of scrambling later.
Organizations where AI is already in use, or about to be, and someone needs to be accountable for how. Nonprofits, band offices, healthcare, professional services, local government, and businesses that hold client or member data they can’t afford to mishandle.
If your team is using AI and no one owns the rules yet, this is the gap this closes.
Governance sets the rules. Training gets your team actually using AI well inside them. The two work together: rules with no skill leaves your team stuck, and skill with no rules is the exact risk this page is about.
Most organizations need both. Many start with one and add the other once they see where the gap is.
I’m not a compliance firm handing you a policy template to file away. I build with these tools every day, so the governance I set up reflects how AI actually gets used in a real organization, not a checklist written by someone who’s never shipped anything with it.
This is a fast-moving space, and the Canadian rules are still taking shape, so I keep the governance practical and current: enough structure to protect you, not so much that it stops your team from getting value. Where the law is genuinely unsettled, I tell you that plainly rather than pretend otherwise.
To your size and how AI is used
Scope and cost settled first
Every engagement is scoped to your organization, its size, how AI is being used already, and how much structure you need, so what you get fits your situation rather than a fixed package.
It starts with a call.
We talk through how AI is being used across your organization today and where the exposure is, and I come back with a scope that fits.
From there I build the strategy and the governance with you, and if you want it kept current as the tools and the rules change, that can carry on.
Anything else, ask me on the call.
It’s the set of rules and decisions an organization puts in place for how AI gets used: what it’s approved for, what’s off-limits, who’s accountable, and how data is protected. In plain terms, it’s deciding how AI is used on purpose, instead of letting it happen by accident.
If your team is using AI and touching client or member data, yes, and the smaller you are, the simpler it is to get right. A short, clear policy now prevents a mess that’s far harder to untangle once bad habits have set in.
Compliance readiness is built in. I line your AI use up with PIPEDA today and the incoming AI-specific rules under Bill C-27, so you’re prepared rather than caught out when they land.
No. A written policy is part of it, but the real work is the decisions behind it: who can use what, how data’s handled, who’s accountable. The document just makes those decisions clear and findable.
Yes. Engagements run remotely with organizations across Canada, so location doesn’t limit whether we can work together.
Scoped to your organization, so the price depends on its size and how much structure you need. We settle the scope and cost on the first call, before anything is booked.
Yes, and many organizations do. Governance sets the rules; training gets your team using AI well inside them. We can scope them together or start with one.
If AI is already in use across your organization and no one owns the rules, the fix is to set them now, clearly, once. Start with a call: we'll talk through how AI is being used today and where the exposure is, and I'll come back with a scope that fits.
For organizations across Canada. Delivered remotely. Scoped to you.
We would like to use Google Analytics to see which pages people find useful. It sets cookies. Nothing loads unless you say yes, and you can change your mind any time on our Privacy Policy.
