AI consulting and governance for firms that hold client data.

We help you choose AI tools, write the rules for using them, and check what data they can reach before anyone turns them on. Built for law firms and for businesses with 10 to 200 people.

Book a 15-minute call

How pricing works

What we help with.

Choosing tools

Which AI tools fit your work

We compare the tools your staff ask about against what you do and what data they would touch, and tell you which are worth the risk.

AI use policy

A short policy people will read

Plain rules on approved tools, what may be entered, and who checks the output.

Data access review

Before the tools are on

AI assistants see whatever the signed-in user can see. We check Microsoft 365 permissions, shared folders and old sites, then fix the ones that expose too much.

Staff training

What not to paste

A short session with real examples: client names, case facts, health data and passwords stay out of public tools.

Governance

Mapped to NIST AI RMF

Who approves a tool, how risks are recorded and when each tool is reviewed, written down so you can show it.

Why the data check comes first.

A tool such as Microsoft 365 Copilot can answer a question using any file the asking user can open. If permissions were loose before, the assistant makes that obvious in minutes. We find and fix those permissions first, so the tool does not hand out files nobody meant to share.

How an engagement runs.

Step 1
Inventory
We list the AI tools staff already use, approved or not, and the data each can reach.
Step 2
Fix and decide
We tighten permissions, pick the tools you will allow and write the policy.
Step 3
Train and review
We train your staff and set a date to review the tools again.

For law firms.

ABA Formal Opinion 512 (July 2024) applies the Model Rules to lawyers’ use of generative AI. We help you show how your firm meets each duty. Our IT for law firms page covers the rest of our work with firms.

Competence: lawyers understand what a tool can and cannot do before relying on it.
Confidentiality: client information does not reach tools that could expose it.
Supervision: someone reviews the output and the terms of each vendor.
Fees: AI-assisted time is billed in a way you can explain.
Client communication: clients are told when the matter calls for it.

Questions about AI consulting.

Do you sell AI tools?

No. We advise on which tools to use and how to run them safely. The choice is yours.

We have no AI policy. Is that a problem?

Staff are probably already using AI tools. We start with a short written policy and a data check.

How does this connect to compliance?

AI use is part of your security program. Our vCISO and compliance service covers the wider program, including HIPAA and the FTC Safeguards Rule.

Does this replace legal advice?

No. We cover the technical and operational side. Your counsel or ethics advisor decides how the rules apply to your firm.

Find out what your AI tools can see.

Book a call. After it you get your three biggest risks in writing, by email.