AI security for small and mid-sized business
Your team is already using AI.Nobody knows what they've pasted into it.
Contracts. Customer records. Source code. Board decks. It goes into a chat box, and it doesn't come back. I help owners use AI properly — without handing the business to a vendor whose terms nobody has read.
Three things that are probably true of your business right now
01
The free tier learns from you
Consumer AI accounts and business accounts are different products with different terms. Your bookkeeper's personal login is not your company's tool, and what goes into it may not stay between you and the vendor. Most teams have never checked which one they're actually using.
02
There is no log
Ask yourself what left your company through an AI tool last quarter. You can't answer that. Neither can your IT provider, because nothing was recording it. That gap is fine right up until the moment somebody asks you the question formally.
03
Your contracts may already forbid it
Client NDAs and data processing agreements routinely bar disclosure to third parties without notice. An AI vendor is a third party. Plenty of businesses are quietly crosswise with agreements they signed years ago and have never reread.
Yes, your competitors are moving. That's not the interesting part.
The interesting part is that most of them are doing it badly, and it hasn't caught up with them yet.
The businesses still standing in five years won't be the ones that adopted AI fastest. They'll be the ones that adopted it without creating a liability they couldn't see — a leaked client list, a breached contract, a regulator's letter, a tool that quietly made things up for eight months.
You can move fast. You just have to know where the floor is.
How working together starts
01
A 30-minute call
You tell me how the work actually gets done — not the org chart, the real thing. No prep, no deck, no homework.
02
I map what's already happening
Where AI is in your business today, and where it should be. Both answers tend to surprise people, and they're rarely the same list.
03
You get a written plan
What to stop this week, what to put in place, and which tools do the job without eating your data. Yours to keep. Implementation is optional and quoted separately.
Start here — free, no email required
All resources- GuideShould you ban AI at work?It's the first instinct after you find out what your team is doing, and it feels responsible. But a ban doesn't get you to zero AI — it gets you to zero visibility. Here's the difference, and what to do instead.
- GuideIs ChatGPT safe to use with company data?The honest answer is that it depends entirely on which account your team is logged into — and most people have never checked. How to find out in five minutes.
- ExplainerShadow AI: what your team is already doingNobody asked permission, and that's not a discipline problem. Here's how AI actually enters a business, why you can't see it, and the cheapest way to find out.
Find out what's actually happening in your business
You don't need to know anything about AI before this call. That's the point of the call.
Bring the thing that's nagging you — a client asking what your AI policy is, a team that's clearly using tools you never approved, a process you suspect is eating hours it shouldn't. We start there.
Worst case, you spend thirty minutes and find out you're in better shape than you thought. That's a real outcome and it costs you nothing.