Everyone can deploy AI.
Can you prove yours is safe?
Most organisations bought the AI before they wrote the rules. We write the rules, then build the systems that hold them.
Which models are running in production, and who signed off on each one?
If a regulator asked tomorrow, how long would the evidence take to assemble?
When a model drifts, who finds out, you or your customer?
If any answer is "we'd have to check", that's the work.
The three pillars
Secured systems. Trusted data. Accountable decisions.
Most organisations treat security, data and AI as three separate projects. We build them as one structure, and we insist on the order. Each pillar only holds if the one before it does.
The rules
Agreed before anything gets built
Secured
Trusted
Accountable
Nano Trust Score
A number you can take to the board.
A few clicks, one score across all three pillars. You get the evidence behind it and the shortest path to raising it.
- 01Where your data, systems and AI actually stand today
- 02Scored against the Australian Privacy Act and recognised governance standards
- 03A fix list, ordered by risk rather than by effort
8 of 68 points across the three pillars
A real assessment result, anonymised. Most businesses score lower than they expect, which is the point of measuring.
Engagements
Three ways in, one structure.
Not three packages. One structure, shaped to where your business actually is. Start at the point that matches the question you cannot yet answer.
Start here · 4 to 6 weeks
Stage two
Continuous
Services
Six services, one order.
Six services, grouped by the pillar each one holds up. Start anywhere, but the order still matters.
Secured · Cybersecurity
Cyber Resilience
Access, encryption, monitoring and secure connections, so a breach is caught early rather than discovered late.
Security Awareness Training
Your team learns to spot the risks that technology alone cannot stop.
Trusted · Data
Data Governance & Quality
Clear rules and reliable numbers, so every decision rests on data you can trace.
Tech Debt Management
Old systems made safe and current, without a rebuild you cannot afford.
Accountable · Decision Intelligence
AI Assurance
Rules, oversight and evidence for every AI decision, written before anything ships.
AI Advisory
Practical guidance on where AI helps your business, and where it does not.
Questions
The questions clients bring us.
The questions that come up in the first conversation, answered before you have to ask them.
We have already deployed AI. Is it too late to govern it?
No. Most of our work starts after deployment. We build an inventory of what is running, who owns it and what it decides, then close the gaps in risk order rather than asking you to stop.
What do you assess against?
The Australian Privacy Act and the Australian Privacy Principles, the ASD Essential Eight, ISO 27001 for security and ISO 42001 for AI management. We align to these standards. We are not a certification body.
Do you build, or only advise?
Both. We write the governance, then implement the controls in your platform so the rules are enforced by the system rather than by a document nobody reads.
How long before we see something?
The Trust Score takes a few clicks and you get the report immediately. An Establish engagement runs four to six weeks and ends with a scored baseline and a prioritised fix list.
Do you replace our existing tools?
Rarely. Most organisations already own more capability than they use. We make what you have work properly before recommending anything new.
We are small. Is this overkill?
The obligations do not scale down. A thirty person clinic holds the same patient data as a hospital and faces the same Privacy Act. The work is sized to you, the standard is not.
Start here
Start with the question you can't currently answer.
A 30 minute readiness call. You leave with the three gaps that matter most, whether or not you engage us.