Workplace AI governance

Put clear guardrails around workplace AI.

Whether your team is beginning to use Copilot and ChatGPT or already has AI embedded across workflows, NorthSecure helps leaders understand use, data risk, accountability, and the controls worth putting in place.

Choose a starting point

Match the work to your current AI use.

Tell us which tools your team uses and what decision you need to make. We can confirm the right scope before an engagement begins.

Three practical options

For organizations getting started

AI Governance Starter

Establish a usable baseline before AI adoption becomes harder to govern.

Starting at $3,500 CAD

Included

  • AI tool and use-case inventory
  • Shadow AI review and approved-tool model
  • AI acceptable-use policy
  • Initial AI risk register and data-handling considerations
  • Leadership briefing and practical governance roadmap

For active AI use

AI Security & Governance Assessment

Review the risks created by Copilot, ChatGPT, AI-enabled SaaS, or internal AI solutions in a defined environment.

Starting at $6,500 CAD

Included

  • Shadow AI and sensitive-data risks
  • Permissions, access, and vendor AI risks
  • Governance controls and policy gaps
  • AI risk register and framework recommendations
  • Executive roadmap

Focused option

AI Acceptable Use Policy

Included in the Starter, or available as a standalone engagement from $1,750 CAD. The policy defines approved use, data boundaries, human review, and escalation expectations in language staff can use.

From assessment to leadership

Keep AI risk decisions, policy updates, and vendor oversight moving with Security & AI Lead.

Practical answers

Frequently asked questions

Is this for a business already using AI?

Yes. The Starter establishes a baseline, while the deeper assessment is intended for active Copilot, ChatGPT, or other AI use.

Will you create an acceptable-use policy?

The Starter includes an AI acceptable-use policy. A standalone policy engagement is also available with an agreed scope.

What risks are reviewed?

Depending on scope, we review shadow AI, sensitive data, access, vendor risks, accountability, and missing controls.

Does the assessment certify AI compliance?

No. We identify gaps and recommend practical controls; we do not issue a certification or legal opinion.

Discuss your scope

Get a clear next step.

Tell us about your business and what you need to understand. We will confirm scope, timing, and the most useful engagement.