AI and privacy readiness assessment · Alberta, Canada
Know where your business stands on AI and privacy
An independent readiness assessment based on ISO/IEC 42001, the NIST AI RMF and Canadian privacy law (Alberta PIPA or PIPEDA). You get a clear diagnosis and a remediation roadmap, fully remote.
Why it matters now
68%
of breached organizations had no AI governance policy (up from 63%).
43%
Shadow AI incidents rose from 20% to 43%.
USD 4.99M
Global average cost of a data breach.
Almost 700
breach reports from businesses, affecting more than 20 million Canadians.
38%
of U.S. workers have entered work information into a personal AI account their employer does not control.
12%
Three out of four organizations have a dedicated AI governance process; only 12% describe it as mature.
What PrivacyNorth AI does
PrivacyNorth AI is an independent assessor. We review how your business uses AI and personal data, check your evidence, and tell you clearly what is in place, what is partly done and what is missing.
We diagnose; we don't fix. Our reports and roadmaps never recommend vendors or products, and we take no commissions.
- Based on ISO/IEC 42001 and the NIST AI RMF
- Checked against the privacy law that applies to you: Alberta PIPA or PIPEDA
- Fully remote, in English or Spanish
Six areas, 18 questions
Each area has three questions. For every answer you can upload proof, and the assessor verifies it.
1. Accountability & Governance
A named person responsible for AI, written rules on how it may be used, and leadership approval.
2. Data Origin & Handling
What personal data goes into and out of your AI tools, consent to use it, and where it is stored.
3. Fair & Unbiased Decisions
Which decisions about people your AI makes or influences, checks for unfair discrimination, and human review.
4. Transparency with the Customer
Telling people when they deal with AI, explaining its decisions, and letting them ask for human review or correct their data.
5. Security / Shielding
Who can access AI tools and data, a rule against entering confidential data into public AI tools, and what your vendors do with your data.
6. Continuous Monitoring
An up-to-date inventory of AI tools, regular reviews, and a response plan for data breaches or serious AI errors.
How it works
Request
Tell us about your business. We review your request, confirm which privacy law applies, and send you an invoice and a secure invitation.
Answer and upload proof
Answer 18 plain-language questions online and upload your evidence. Save and come back at any time.
Get your results
The assessor verifies your answers and evidence, then releases your score, your Readiness Level, a remediation roadmap and a full report.
Frequently asked questions
What is a readiness assessment?
A structured review of how ready your business is to use AI responsibly and to protect personal data. It is based on ISO/IEC 42001, the NIST AI RMF and Canadian privacy law. It is not legal advice.
Which privacy law applies to my business: Alberta PIPA or PIPEDA?
Most private-sector businesses in Alberta are covered by Alberta's Personal Information Protection Act (PIPA). Federally regulated businesses, and businesses in most other provinces and territories, are generally covered by the federal PIPEDA. You tell us your province on the request form, and we confirm the applicable law with you before we start. Businesses in British Columbia are accepted case by case; British Columbia's provincial privacy law is not assessed in this version. We cannot take on businesses in Québec yet.
Is my data safe?
Your answers and files are stored in Canada and encrypted in transit and at rest. Each client sees only its own organization, our staff sign in with two-step verification, and every action is logged. Our emails contain links only, never assessment data. We use no tracking cookies.
What do the Readiness Levels mean?
Your score is out of 100. Silver Readiness Level is 70–79, Gold Readiness Level 80–89 and Platinum Readiness Level 90–99. Diamond Readiness Level is 100 with all 18 answers verified green. If any area is red, no level is awarded.
How long is a Readiness Level valid?
12 months from the date your results are released.
Will you recommend tools or vendors?
No. We give you a roadmap of what to fix, but we never recommend vendors or products in our reports, and we take no commissions.
Do you need to visit our office?
No. The whole assessment is done online, in English or Spanish.