Find the right first use
We look for repeat office tasks where AI saves real time without creating a bigger checking job. Intake routing, internal search, routine drafts, and documentation help within approved limits.
AI policy and governance for nonprofits and law firms
Your staff may already be using AI. We help you set the rules.
We turn a useful idea into an approved workflow, with privacy, access limits, testing, and human review built in from the start.
AI GovernanceStart with one task, protect the information, and keep a person in the loop
Set up the tool safely
We compare Microsoft Copilot, ChatGPT, Google Gemini, and other approved tools against the job, the cost, the provider terms, and the data controls. Every assistant or connector gets an agreed purpose, limited permissions, and a clear stop point.
Write the rules and train staff
Staff get plain rules: which tools are approved, what information is allowed, what is off limits, and how to report a problem. Official communication and client facing work get a human review before anyone relies on it.
Staff know what is allowed, and leaders know what is running
- BeforeStaff paste private details into whatever tool is open.AfterApproved tools, approved information, and a rule everyone can repeat.
- BeforeA polished draft goes out with a wrong fact in it.AfterA named person reviews before it leaves the building.
- BeforeNobody can say which AI tools the agency uses.AfterA short list, with who is responsible for each one and what it can reach.
Five steps, small before big
- Pick one taskSomething repeatable, low risk, and worth the time saved.
- Set the boundariesThe identity the tool uses, the sources it may read, and the actions that need a person to approve.
- Pilot with real workNormal cases, exceptions, review effort, and cost, checked on a small scale.
- Write the rules and train staffPlain language, one page, with a way to report problems.
- Review and expandKeep what works, fix what does not, and only then add the next task.
How we see AI
AI is here to stay. We use it, and we are open about it.
Some people say AI is a bubble that will pop. We do not see it that way. We see it the way we saw the move to the cloud. It brings real gains and real limits, and the organizations that do well learn both.
Where AI helps
- Getting routine work done faster
- Finding answers across a lot of information
- Drafting a first version so a person can improve it
- Watching systems around the clock
Where a person still decides
- It can sound sure and still be wrong
- It can miss the nuance a person would catch
- It can carry bias from what it learned
- It can pull in old details that do not belong
How we use it ourselves
AI is part of how we work every day. It helps us watch your systems around the clock, move through setup and documentation faster, and handle more than one thing at a time. Getting there took real setup work, and a person still checks what matters. We are open about where AI is part of the work we do for you.
Built to CIS Controls v8 and NIST CSF 2.0.
AI work follows the same security foundation as everything else, CIS Controls v8 and NIST CSF 2.0. Sensitive information stays inside approved systems. This service does not create, approve, or manage clinical, case, or program records, and it does not guarantee that an AI result is accurate or compliant. Your organization keeps every professional decision.
- CIS Controls v8
- NIST CSF 2.0
- HIPAA
- NY SHIELD Act
- 42 CFR Part 2
- OPWDD
- Cyber insurance
What is included, and what is not
Included
- Use case assessment and a written recommendation
- Tool selection and secure setup
- Assistants and connectors with limited permissions and a review point
- Written rules and staff training
Scoped separately
- The AI subscriptions themselves
- Custom software beyond the agreed workflow
- Any work on clinical, case, or program records
Your written quote spells out every detail. Compare the plans.