A fixed-fee, fixed-scope sprint that finds where your company data is leaking into public AI tools, and locks it down without slowing your team. Most organizations have already adopted AI. They just have not governed it. We map the exposure, set a governing policy, classify the data, and give the team a safe path to keep using AI.
Mid-market companies (roughly 50 to 500 employees) and funded startups that are watching employees paste client data, financials, or source code into ChatGPT, Claude, and other public tools with no policy governing it. Heading into a SOC 2, HIPAA, ISO 27001, or cyber insurance renewal and needing a defensible AI and security posture on the record. Under pressure from a board, an investor, or a banking partner to show they have AI governance in place. Adopting AI fast and wanting to enable it safely rather than ban it.
A structured review of where data is actually moving, ending in a ranked map of where proprietary data is most exposed and why.
A customized AI and data acceptable-use policy, aligned to the NIST AI Risk Management Framework and ISO 42001, written so your team can actually follow it. Built for adoption, not a binder nobody reads.
A clear, role-readable matrix defining what is safe for public LLMs, what requires an enterprise or private AI tool, and what should never be uploaded. This is the operational backbone your policy points to.
A focused review of the controls that cause most breaches, with prioritized remediation, not just a list of problems.
A prioritized, phased plan of what to build, buy, or fix next, sequenced by risk and effort. The document that turns the assessment into action and tells leadership exactly where to spend next.
Delivered by a senior Solutions Architect with deep experience in regulated financial services and federal environments, where safe AI deployment under a framework and an audit clock is the daily job. You are buying senior judgment, not a junior analyst running a checklist.
| Tier | Scope | Investment |
|---|---|---|
| Essentials | Single environment (one Workspace or M365 tenant), team under ~75. All five deliverables. Final readout document. | $2,500 |
| Foundation | Up to ~250 employees. Adds deeper vendor and supply-chain review, expanded interviews, and a live readout presentation to leadership. | $3,750 |
| Foundation+ | Up to ~500 employees, or organizations with a data platform. Adds a platform-level data-flow review (where a warehouse, lake, or pipeline exists), a board-ready deck, and a 30-day post-delivery check-in. | $5,000 |
Priced as an approvable expense, not a procurement event.
This page is the AI front door. If your week is more about phishing, ransomware, backups, and vendor access than about AI exposure, start at the security hub instead. The Secure AI Use Review is the deliberate crossover point between the two paths, so wherever you start, you can reach it.
If you are clean, you get peace of mind. If you are exposed, we show you exactly where, and how to lock it down without slowing your team. No pitch, just a read on where you stand.