AI governance
We help you decide where AI belongs in your organization, in a few workshops: security, project management, training and, of course, costs; cloud or private models. We help you see things more clearly. We recommend an audit first.
Workshops · one per theme · audit recommended first
- Format
- A few workshops, one per theme
- Who is involved
- Your leadership, your IT team and the owner of each theme
- What you leave with
- Your decisions on each theme, recorded as the basis for an AI usage policy
- What comes next
- Training, which puts the rules into practice, or a proof of concept
Who needs AI governance workshops
These workshops suit organizations where AI is already in use, or about to be, and where nobody has yet settled what is allowed, who decides and who pays.
- Employees paste documents into consumer AI tools, and no rule says which tools are allowed.
- Law 25 raises questions about the personal information entrusted to AI, and you have no written answer yet.
- The choice between cloud and private models is still open, for lack of criteria on data and control.
- AI usage costs are hard to forecast, and nobody knows who answers for them in the budget.
One workshop per theme
- Security and privacy: which data can go into an AI tool, who has access, and whether your uses of AI comply with Law 25.
- Project management and roles: who decides, who approves and who owns an AI project, from idea to operation.
- Training: what each role needs to know to use AI within the organization's rules.
- Costs: what models cost per use, plus licences and operations, and who answers for them.
- Cloud or private models: what each option changes for your data, your costs and your control.
Short AI governance workshops, with decisions on record
Each workshop covers one theme and brings together the people with authority to settle it: security, roles, training, costs and the type of model. The session is short and ends with a written decision, not a round of opinions. We record what was decided, who owns it and what remains open. By the end of the workshops, your decisions form the basis of an AI usage policy that your organization can adopt and keep revising.
For Law 25, the security and privacy workshop helps you prepare the privacy impact assessment (PIA), known in French as the évaluation des facteurs relatifs à la vie privée (EFVP): which personal information enters a tool, where it is processed and who has access. The assessment remains your responsibility, and the workshops are not legal advice; your counsel validates anything that touches the law. Costs are covered line by line (licences, model usage, operations), along with the question of who answers for each.
What you get
Decisions on record
For each theme: what was decided, who owns it and what remains open, in a form you can carry into an AI usage policy.
A reasoned model choice
The comparison between cloud and private models, with the reasons that tipped the decision on your data, your costs and the control you need.
Roles and a decision path
Who proposes, who approves and who answers for an AI project, from idea to operation, so that a team request has a clear path instead of a workaround.
After AI governance, getting the rules applied
Recorded rules change nothing until teams know them. Training passes them on to executives, teams and AI leads, each in their own role. When one of the decisions rests on an assumption, for example that a private model will answer a given need well enough, a proof of concept tests it on a real case before any commitment.
Frequently asked questions
Do we need the audit before the governance workshops?
We recommend it. The audit shows where AI belongs in your organization and what is holding you back, which gives the workshops something to work from. If your situation is already clear, you can start with governance.
Do the workshops cover Law 25?
The security and privacy workshop reviews whether your uses of AI comply with Law 25: which personal information goes into a tool, where it is processed and who has access. It prepares your decisions. Legal advice remains with your own counsel.
Do the workshops always lead to a private model?
No. The workshop compares cloud and private models on your data, your costs and your control, and the choice is yours. Sovereignty is an option based on your needs, with Québec as the default.
Do the workshops produce an AI usage policy?
They produce your decisions, theme by theme, recorded as the basis for a policy. Writing the final text, approving it internally and circulating it remain with your organization, which builds on this material instead of starting from a blank page.