Workplace AI use
Map tools and use cases, the information they receive, approval responsibilities, and tasks that require human review.
For Canadian professional-services firms
Put clear controls around client information and workplace AI.
Your team may use Microsoft 365, document systems, and AI tools in the same client workflow. A useful review starts with what people actually use, what information those tools can reach, and who is responsible for the rules.
NorthSecure AI helps Canadian professional-services leaders assess security and AI-governance gaps, then prioritize practical next steps. The engagement is scoped to your environment and obligations; it does not replace legal advice or a formal audit.
When to investigate
Questions that warrant a closer look.
These are reasons to investigate, not evidence that any particular firm has a security weakness.
- Your team is moving from informal AI use to approved tools and written guidance.
- Leaders want to check whether Microsoft 365 settings support their client-confidentiality rules.
- A client, insurer, or procurement team has asked how information is protected or AI use is governed.
- Practice groups use different tools, without a current inventory or clear approval route.
A scoped review
Examine the tools, controls, and decisions that matter.
We agree on the assessment scope before work begins.
Microsoft 365 controls
Review relevant identity, sharing, email, device, and domain settings through the existing read-only assessment scope.
Exposure and leadership priorities
Where relevant to the agreed scope, bring public-facing exposure, policy readiness, and remediation priorities into one executive-friendly view.
Choose a starting point
Match the engagement to your first decision.
Published starting prices are in CAD. Final scope and price depend on your environment; each engagement includes only the work agreed in its scope.
AI Governance Starter
For an AI inventory, acceptable-use policy, initial risk register, approved-tool model, and roadmap.
Microsoft 365 Security Assessment
For a read-only review of relevant identity, sharing, email, device, and domain configurations.
Complete Security & AI Readiness Assessment
For an agreed mix of external security, Microsoft 365, AI governance, policy readiness, and a prioritized roadmap.
What you receive
A decision-ready view of the work ahead.
The agreed assessment produces an executive-friendly risk summary, analyst-reviewed findings, and prioritized recommendations. A technical appendix and 30/60/90-day plan are included where scoped.
Preview the format
Our clearly fictional sample report illustrates the format. It is not a client case study or evidence of a past customer result.
Practical answers
Frequently asked questions
Do you need access to confidential client files?
The Microsoft 365 assessment is read-only and configuration based. Access and any additional evidence needs are agreed in the engagement scope. Do not send client records through a website inquiry.
Is this a legal, privacy, or SOC 2 audit?
No. NorthSecure provides security and AI-governance assessment and advisory work. Legal interpretation and formal attestation require the appropriate professional adviser or auditor.
Can we start with an AI policy rather than a full assessment?
Yes. The existing AI Acceptable Use Policy offer starts at $1,750 CAD as a standalone scoped engagement and is also included in AI Governance Starter.
What happens after the review?
The output is a prioritized plan that leaders can assign to internal staff or service providers. Remediation or ongoing assurance work is scoped separately.
Talk through your scope
Start with the decision you need to make.
Tell us what is driving the review. We can discuss a practical first step without asking you to send client records through the website.