We find which AI tools your staff are already using, write an acceptable-use policy in plain English, put technical controls behind it, and train your team on what can and cannot be shared.
- Singapore-based team
- 10+ years in the field
- 100+ clients supported
Sound familiar?
Problems we get called in to fix
Shadow AI
Staff sign up to free AI tools with work email and paste in whatever they are working on. You cannot audit those accounts, revoke them when someone leaves, or say what went into them.
Client and personal data leaving the building
A contract pasted into a free chatbot is a disclosure. Under PDPA that is your problem, not the tool's, and 'we did not know they were doing it' is not a defence.
No policy, or a policy nobody has read
A four-page legal document does not change behaviour. A one-page rule set with clear examples of a safe and an unsafe prompt does.
Clients starting to ask
Tender documents and vendor questionnaires now ask how you govern AI use. Having a written answer ready wins work; scrambling to write one during a bid does not.
Your team is already using AI tools. The question is whether client data, contracts and personal information are going in with it. We find which tools are in use across the company, write an acceptable-use policy your staff can follow without a legal degree, put technical controls behind it, and train people on the difference between a safe prompt and a PDPA problem.
What you get
- Shadow AI discovery — which AI tools are in use and by whom
- A written acceptable-use policy, in plain English, ready to sign off
- Data loss prevention rules that block the risky uploads
- Staff training on what may and may not be shared with an AI tool
How it works
From first call to fully managed
- 1
Free assessment
A free discovery pass over your network and Microsoft 365 sign-in data showing which AI services are in use, from which accounts, and how often. Most owners are surprised by this list.
- 2
Proposal and scope
You get a written scope with what is covered, what is not, response times and the monthly commitment. No lock-in tricks buried in clause 14.
- 3
Rollout
We draft the acceptable-use policy against how your business actually works, apply DLP and access controls to back it, run staff training sessions with your own examples, and give you the sign-off record to keep.
- 4
Ongoing management
Monthly reporting, quarterly review with your management team, and one named engineer who already knows your setup when you call.
Built for
- Singapore SMEs handling PDPA-covered personal or client data
- Professional services firms bound by client confidentiality terms
- Companies answering AI governance questions in tenders or audits
- Any business where staff have already started using AI tools unofficially
What you can check for yourself
4
Apps we built and still run
Live on the public internet, not mockups
10+ years
Supporting Singapore SMEs
Same team since 2014
Under 30 min
First response target
Written into every support agreement
Singapore
Where our engineers sit
No offshore first line
FAQ
AI Security & Usage Policy — common questions
Get a free assessment
Tell us what is bothering you about ai security & usage policy and we will give you an honest read on what needs fixing first — no charge, no obligation to sign anything.