Thirteen questions on how AI is handled in your business, then your AI security result on screen. A fuller readiness assessment — optional, and about five more minutes — comes afterward, if you want it.
You'll see your results on screen as soon as you finish. You can download the full written report as a PDF straight from the results screen, no email needed. If you'd rather have it emailed, add your email instead — your name is optional.
There are no wrong answers here, and "I'm not sure" is often the most useful thing you can tell me. Uncertainty about what's happening inside your own company is the single most common finding in this work — and usually where the fastest wins are hiding.
Only anonymized, aggregated findings from your responses are included in the North Bay AI Readiness Report.
Two 45-minute sessions about a week apart, with the analysis in between. Leave the second one knowing your first move.
The question it answers: "What do I do about this?" — when you have one specific, well-defined AI question and you need a real answer, not a proposal.
Here's the honest version of what two sessions and the work between them can and can't do. They don't establish either layer of your business systematically — that's what the reviews are for. What they do is put judgment built since 1982 against one well-defined question: an interview to find the real problem, a few days of my own analysis, and a debrief with a recommendation and the reasoning attached. For a specific question, that's often exactly enough.
How it runs — two 45-minute sessions, not one long call. The first is the interview: you walk me through what you're trying to figure out, and I ask the questions that get us past the stated problem to the real one underneath it. Then we stop, and I go away and think about it properly — which is the part that doesn't happen when advice gets improvised on the spot. The second session is the debrief: what I see, the move I'd make first, why, and what to watch out for — then working through it with you until it's concrete. A written recap of the direction follows, so nothing evaporates once you're back to running the business.
Scheduling: booking reserves the first session. We set the debrief at the end of it, once I know how much digging your question needs — usually within the following week.
The part most people don't expect: if the honest answer is that your question needs a proper review to answer well, I'll tell you that in the first session — not after you've paid for one. And if you're already using AI on sensitive data without a written policy for it, we handle that first, at no charge, because it's a liability you shouldn't carry a day longer than you have to.
What you walk away with: specific direction on your first move, a written recap after the debrief, and no engagement or commitment waiting on the other side of it.
Payment: $995 total, covering both sessions, the analysis between them, and the written recap. A 50% deposit of $497.50 is taken when you book the first session; the remaining $497.50 is invoiced separately and due before the debrief.
Credit: the full $995 credits toward either review — Leadership or Whole-Company — or toward the Working Session + Security Review, within 90 days, if you decide to go deeper.
Book a Working SessionAbout two weeks. The same two sessions as the Working Session, with my analysis and a review of how your team uses AI between them.
For: a specific AI question, in a business where AI is already in use without clear rules around it. It answers "What do I do about this — and what can reach our data?"
Session one — the interview. Exactly as in the Working Session: we get past the stated problem to the real one underneath it.
Between sessions — the analysis and the AI review. Alongside the analysis, we go through the AI tools, accounts, plans and settings your business actually uses: whether training on your data is turned off, who has access to what, and what any AI agents can do on their own.
How the review is done: you share your screen and walk me through it. I never ask for or hold your passwords or access to your accounts.
Session two — the debrief. The move I'd make first on your question, plus what the review found and what to fix first.
What you walk away with: specific direction on your first move and a written recap, plus a tailored AI use policy (one to two pages), a prioritized security fix list, and a protocol for verifying payment requests against AI-powered scams — cloned voices and fake payment-change emails.
What stays free: if you're using AI on sensitive data with no written policy, I'll point you at the basic rule whichever engagement you choose, or none. What this adds is a policy written for your business, and a review of what's actually configured.
What it is not: a review of how your business uses AI — not an IT security audit, penetration test, compliance certification, or legal advice. Findings are limited to what you show and tell me, and you're responsible for implementing the changes.
Outside threats: Outside threats — website scrapers, break-in attempts, fake sign-ups — I’ll flag what I see and point you to the right IT help. Defending against intrusion is IT security work and isn’t part of this review.
Scheduling: booking reserves the first session. We set the debrief at the end of it.
Payment: $1,995 total. A 50% deposit of $997.50 is taken when you book the first session; the remaining $997.50 is invoiced separately and due before the debrief. Rescheduling and cancellation work exactly as they do for the Working Session.
Credit: the full $1,995 credits toward either review within 90 days of your debrief. Already had a Working Session? Its full $995 credits toward this within 90 days.
Book a Working Session + Security Review10 days to two weeks. Where your company should put AI first, decided from a real read of the business.
For: owners past needing one quick answer, about to commit real money and attention, who want to know where to start.
Days 1–3 — the facts. A short questionnaire, not a meeting: what software you run, what connects to what, where your data lives. Whoever administers your systems can answer it in twenty minutes, so your team's time later goes to judgment, not fact-finding.
Days 3–6 — leadership sessions. Working sessions with you and your senior team on what the business is trying to do and what's in the way. Alongside them, I read your systems for the places where the designed workflow and the real one are likely to pull apart — I don't interview staff at this tier, but those seams are usually where the findings are.
Days 6–10 — analysis. No meetings. I build the opportunity inventory and rank every item against business value, feasibility, cost, time to value, your readiness, and risk.
Delivery. A prioritized shortlist with the reasoning shown, plus specific first-30 and first-90-day moves — then a session together to work through it, because a plan nobody argues with is a plan nobody follows.
AI security review included. The AI tools, accounts and settings your business uses, reviewed by screen share (I never ask for or hold passwords), with a tailored AI use policy, a prioritized security fix list, and a payment-verification protocol.
Credit: the full $3,500 credits toward a Whole-Company Review within 90 days, if you decide you want to hear from the people doing the work as well.
Schedule a ConsultationThree to four weeks. A plan sequenced from what's actually true, not what's assumed.
For: companies complex or spread-out enough that the truth lives in a dozen different heads, and leadership's picture and the front line's reality have quietly drifted apart.
What's different from the Leadership Review: one thing. Across four to six functions, I sit down with the people doing the work — up to twelve structured interviews, each with a short set of questions sent a few days ahead. That's where the findings that matter surface: the workaround nobody mentions in a management meeting, the report that takes six hours because two systems don't talk, the employee already pasting customer information into an AI tool because it saves her an afternoon.
Week one establishes the facts and leadership's view, exactly as in the Leadership Review. Week two is the staff interviews. Week three I go quiet and build the full opportunity inventory, ranked, flagging where leadership and staff disagreed — often the most useful thing in the report. Week four you get the written plan and we work through it together, agreeing what the first 30 days look like.
What you walk away with: a single trustworthy picture of what's really happening, a sequenced 30/90/180-day roadmap, and training and responsible-use recommendations for putting AI in your people's hands without creating new risk.
AI security review included. The AI tools, accounts and settings your business uses, reviewed by screen share (I never ask for or hold passwords), with a tailored AI use policy, a prioritized security fix list, and a payment-verification protocol.
Credit: the top of the ladder — the $995 session, the $1,995 session with security review, and the $3,500 review each credit in full toward it within 90 days, so stepping up in stages costs you nothing but time.
Schedule a Consultation