OUR APPROACH
What we do, and where we start.
Every organization now runs on personal data, and everyone it deals with wants to know that data is in good hands. We work in four practice areas that together answer that question, and we offer them at three levels, depending on where you are today.
Four Practice Areas
01
02
03
04
Three Solutions
Foundational
Operational
Sustained
PRACTICE 04
AI Governance
Adopt AI with clear rules, so it helps the business without putting people's data at risk.
AI usually arrives in an organization before any decision to adopt it. Someone in marketing pastes a customer list into a chatbot. HR tries a tool that ranks applicants. The contact center switches on software that scores every call.
Each is a sensible attempt to work faster. Each also puts personal data into a system that nobody has reviewed. The National Privacy Commission has issued guidelines on AI systems that process personal data, and systems that make automated decisions or profile people must be registered with the NPC, whatever the size of the organization.
The answer is not to ban AI. Bans do not hold, and they give up real gains. The answer is to decide, in writing, what is allowed, on which tools, with what data, and who checks. That record is what a regulator, a client or your own board will ask to see.
Organizations that do this early move faster later. New tools are approved in days because the questions are already settled.
WHAT WE DO
AI inventory
A register of the AI tools in use, including the ones nobody approved.
Automated decision-making Compliance
NPC registration, the notices people are owed, and a working human review step.
AI use policy
Clear rules on which tools staff may use, with what data, and for what purposes.
Client and contract readiness
Answers to the AI clauses and questionnaires your clients now send.
AI risk and impact assessments
For each AI use that touches personal data, with safeguards ranked by risk.
Training and board briefings
For the people using AI and the people accountable for it.
Vendor due diligence
What AI providers do with your data, where it goes, and whether it trains their models.
CALL US WHEN
-
Staff are using AI tools and there is no policy.
-
You are about to buy or build a system that scores, ranks or decides about people.
-
A client has asked how you use AI on their data.
-
Your board has asked what the company's position on AI is.
-
You use automated decisions in hiring, lending, fraud checks or monitoring.
Not applicable? Click on these other practice areas:
OUR SOLUTIONS
Wherever you are on your compliance journey, we meet you there.
We build your foundation, equip your leaders and in-house teams, and stay as the rules evolve.
HOW WE ENGAGE
Three ways we work with you.
Fixed-scope Projects & Deliverables
We may be engaged to deliver a defined policy, audit report, review, or other documents at a fixed fee.
Retained Advisory & DPO Support
Ongoing access to our team as your outsourced or co-sourced Data Protection Officer, with regular reviews and regulatory updates.