AI · security and governance

Use AI without handing it your data.

Your staff already use AI: free chat accounts, browser extensions, meeting bots, Copilot trials. Most of it is invisible to IT, and some of it is fed with customer data, contracts and source code. We find what is in use, make the tools you choose safe to roll out, and give people clear rules they will actually follow.

What we do

Shadow AI discoveryWe look at what is really used, from proxy, DNS and Defender for Cloud Apps logs, OAuth app consents and browser extensions, and rank it by the data it touches. You get a register of AI tools, who uses them and what to approve, replace or block.

Microsoft 365 Copilot readinessCopilot shows people everything they already have access to, so oversharing becomes a data leak overnight. We find over-shared SharePoint sites and Teams, set sensitivity labels and DLP in Purview, tune retention, and run a controlled pilot before the wide rollout.

AI use policy and trainingA short policy that names the approved tools and the data that never goes in, plus 45 minutes of practical training. It also covers the AI literacy duty in article 4 of the EU AI Act, in force since February 2025. Try our free AI policy generator for a first draft.

Securing the AI features you buildThreat modelling and testing for chatbots, RAG search and agents against the OWASP Top 10 for LLM applications: prompt injection, sensitive data disclosure, excessive agency and insecure output handling. Fixes go into your pipeline, not a PDF.

EU AI Act: obligations phase in over several years, and the timeline for high-risk systems has been under revision. We map which of your AI uses fall into which category and track the dates that apply to you, so you are not caught by a deadline or spending on one that has moved.

What you get

A register of AI tools in use, with an approve / replace / block decision for each
Copilot readiness report: oversharing findings, labels and DLP policies configured, pilot plan
AI use policy in English and Romanian, plus training records for your evidence file
For AI features you build: threat model, test results and fixes tracked to closure

Rolling out AI this year?

Tell us which tools you use or plan to use and roughly how many people. We'll reply by email with a plan and a fixed price.

Get in touch →