Describe your situation FR

Service family

Strategy and governance

Before choosing a tool, you need to know what to do with AI, in what order, and how to govern it. These two services give leadership a written basis for decisions.

The AI governance loop Four steps in a loop: a policy sets the rules of use; the register lists the systems, their data and their owners; a privacy impact assessment (PIA) evaluates the risks of each project; follow-up reviews, handles incidents and updates the policy. Policyrules for AI use Registersystems, data, owners PIArisks and measures, per project Follow-upreviews, incidents, updates ONGOING GOVERNANCE
Governance is not a one-time document: each step feeds the next.

AI maturity assessment and roadmap

Who it's for

Senior management and IT leads who receive AI requests from all sides and want to decide on solid ground.

Typical problem

“Everyone is talking to us about AI. Some of our staff already use ChatGPT. We don't know where to start, or what's risky.”

What we do

  • Short interviews with management, IT and two or three business teams.
  • Inventory of current AI use, including undeclared use.
  • Assessment of your data, systems and constraints: Quebec's Law 25, contracts, security.
  • Prioritization of use cases by value, feasibility and risk.

Deliverables

  • Written assessment report.
  • Phased roadmap, over a time horizon agreed with you.
  • Prioritized use cases, with the conditions for success of each.
  • Presentation to management.

Proof

The assessment grid uses the checkpoints applied in our labs, in particular L7 — Law 25 register and PIA and L2 — Enterprise AI gateway.

AI governance and Law 25 compliance

Who it's for

Organizations that already use AI, or are about to, with personal information.

Typical problem

“We have an AI tool in place. If the Commission d'accès à l'information (Quebec's access to information commission) asks us questions tomorrow, we have nothing in writing.”

What we do

  • AI use policy tailored to your organization.
  • Register of AI systems: purpose, data, vendor, hosting location, owner.
  • Privacy impact assessments (PIAs) for projects that require them.
  • Processes for automated decisions: informing the individuals concerned and review by a human.
  • Support for the person in charge of the protection of personal information.

Deliverables

  • AI use policy.
  • Register of AI systems, in a format your team can keep up to date.
  • PIAs drafted for prioritized projects.
  • Written procedures and reusable templates.

Proof

L7 — Law 25 register and PIA: we apply these templates to our own systems before offering them.

We are not a law firm. For a specific legal question, we work with your legal counsel.

Other service families

Let's talk about your situation

Every organization has its own systems, data and constraints. We always start by understanding your situation. Scope and investment are then proposed in writing.

Describe your situationSee our approach