Govern

AI Governance & Risk

Your staff are already using AI — the question is whether it is governed. We put in place practical AI governance: an acceptable-use policy, an inventory of AI tools in use, risk and privacy assessments aligned with PIPEDA, Quebec’s Law 25 and provincial privacy laws, vendor reviews, and reporting your leadership and board can rely on. Aligned with frameworks like ISO/IEC 42001 and the NIST AI Risk Management Framework.

Typical range$6,500–$20,000

Timeline3–6 weeks

DeliveryRemote across Canada, on site available

Book a free 30-minute call

Who it’s for

Organizations whose staff use AI tools without a policy
Regulated and public-sector organizations, and their suppliers
Boards and leadership teams that need AI risk reporting

What you get

Clear rules for how your organization uses AI
Known and managed AI risks, including privacy risks
Evidence of responsible AI use for clients, insurers and auditors

Deliverables

AI acceptable-use policy
AI tool inventory and risk register
Privacy impact assessments for AI use cases
AI vendor due-diligence checklist
Board-level AI governance report

Pricing

$6,500–$20,000 CAD · Typical range

Most governance foundations fall in this range, depending on organization size and regulatory requirements. Ongoing governance reporting is available monthly.

Prices exclude applicable sales tax.

Frequently asked questions

Is there an AI law in Canada?

Canada’s proposed federal Artificial Intelligence and Data Act (AIDA) did not become law. AI use is still governed by existing privacy laws — PIPEDA federally, plus provincial laws such as Quebec’s Law 25, which requires telling people when a decision about them is made exclusively by automated processing. We track changes and keep your governance current.

What is ISO/IEC 42001?

ISO/IEC 42001 is the international standard for AI management systems. We use it as a reference so your governance is credible and can grow into certification if you ever need it.