BLOG
Notes on ethical AI use.
October 22, 2026
The AI inventory: find every AI tool in your company
Every AI framework, audit and customer questionnaire starts with the same question: what AI do you use? How to find all of it — sanctioned, embedded and shadow — and the register structure to record it in.
October 22, 2026
EAUS vs ISO 42001 vs SOC 2 vs NIST AI RMF: which does a business your size need?
Four frameworks, four different jobs: NIST AI RMF is guidance, ISO 42001 certifies a management system, SOC 2 attests security controls, EAUS certifies how your people use AI. What each proves, what each costs, and how they combine.
October 22, 2026
How to answer a customer's AI questionnaire
Your biggest customer just sent an AI due-diligence questionnaire. What they're really asking, the standard question set on data, oversight and disclosure, what evidence satisfies each — and how to answer in hours next time instead of days.
October 22, 2026
Shadow AI: your staff are already using it — here's the policy that works
Shadow AI is employees using AI tools your business never approved. The real risks are data exposure and invisible decisions, not rule-breaking. A practical response: find it, approve a short list, set data rules, skip the ban.
October 22, 2026
AI governance for small businesses: the minimum viable program
AI governance sized for a small business: the NIST AI Risk Management Framework cut down to one owner, a one-page policy, a register with one row per AI tool, and a quarterly review. What to do, in what order.
October 22, 2026
Canada's AI rules after AIDA: what actually applies to your business
AIDA died with Bill C-27 in January 2025 — but AI use in Canada is still governed. PIPEDA, Quebec's Law 25, Ontario's AI hiring disclosure rule, OSFI E-23 and the rules actually in force, in one inventory.
October 22, 2026
Does the EU AI Act apply to Canadian businesses?
The EU AI Act reaches Canadian businesses whose AI — or its output — is used in the EU. The three ways it catches you, which duties apply now and which arrive in December 2027, and the order to do the work in.
October 22, 2026
You didn't build the AI. You still have obligations.
Most EU AI Act guides are written for AI builders. This one covers the obligations of deployers — businesses that use AI tools: what's live now, what starts in December 2027, and the order to do the work in.
October 22, 2026
AI disclosure requirements: when you must tell people it's AI
Since 2 August 2026, EU law requires disclosure when people talk to AI, are analysed by it, or read and watch what it made. What the four Article 50 duties cover, what counts as disclosure, and sample wording.
October 22, 2026
How to Write an AI Use Policy for a Small Business
Write a practical AI use policy for your small business: approved tools, confidential information, human review and clear responsibility.
October 22, 2026
AI Disclosure Statements for Businesses: What to Say and When
Learn when to explain AI use to customers, with practical examples for website statements, AI-assisted deliverables and customer-facing chatbots.
October 22, 2026
Human Oversight of AI at Work: A Practical Review Checklist
Make human oversight meaningful with a practical checklist for reviewing AI-assisted work, approving important decisions and assigning responsibility.
October 21, 2026
Ethicality Certification vs ISO 42001 vs SOC 2: Which Do You Need?
Compare AI use certification, ISO/IEC 42001 and SOC 2: what each covers, who it serves, and which option fits your organization.
October 21, 2026
How Much Does AI Certification Cost? A Guide for Small Businesses
Compare published AI certification costs, from ISO/IEC 42001 estimates to Ethicality annual fees, plus renewal costs and staff time.
October 21, 2026
AI Certification for Firms That Use AI, Not Build It
Your firm uses AI tools rather than building them. Learn which AI-use practices clients want verified and how Ethicality certification fits.
October 21, 2026
Ethical AI Use Certification: A Guide to the Ethicality Badge
Learn what the Ethicality Badge certifies, the 15 EAUS requirements, how to apply, and annual pricing for businesses using AI at work.