This is the question I hear most often now, and it's the right one to ask first.

This is what people call "Shadow AI" — your team using AI tools you don't officially know about. Your team is experimenting with ChatGPT, Microsoft Copilot, Claude, and a half-dozen others — because vendors are pushing and the work still has to get done. The trouble is that data is going into those tools in ways nobody has mapped: customer information, internal documents, contracts, financial details. Policies haven't caught up.

Here's how I usually approach it:

1. A short AI usage audit to find out what tools are actually being used, what data is going into them, and where the real exposure is — customer info, business secrets, contracts, financial records, regulated data.
2. A plain-English AI use policy — three pages, not thirty. What's allowed, what isn't, and what gets recorded.
3. An approved Microsoft 365 Copilot rollout plan if you're already on Microsoft 365 — gives your team a controlled tool where data stays inside your business's private Microsoft 365 workspace, with a record of who used it for what.
4. For every piece of work we automate going forward, we build in four safeguards by default: only the right people can touch each piece of data, a person still signs off on anything customer-facing, passwords and keys are stored securely, and there's always a way to undo it if something goes wrong.

The goal isn't to stop your team from using AI. It's to give them a safer way to do it, with the right boundaries in place to protect what matters.

This is the most universal first question I get, and the honest answer is shorter than most consultants will tell you.

You don't need an AI strategy deck. You need to know which two or three repetitive things your team does every week that AI can take off their plate — and which ones it can't do safely yet.

Here's how I'd approach it:

1. A two-week AI Starter Plan that looks at your current operations, identifies the highest-value workflow candidates, and gives you a plan with priorities — effort, impact, and risk estimates for each.
2. We pick one — the smallest useful first build — and either you take it forward yourself, or we do it together as an AI Workflow Review (the review + plan), then optionally into a build if it makes sense.
3. The deliverable is a plain-English document, not a 200-page slide deck. You should be able to read it in one sitting and know exactly what to do next.

About a third of partners take the plan and run with it themselves. The other two-thirds keep going with us into the build. Either way is fine.

Yes — and these are exactly the workflows AI is good at right now.

The market language is "agentic workflows" or "AI automation," but in plain English it means: software that does the boring, repeatable parts of work without your team having to do them manually. The work I've seen the highest return on for Canadian small and mid-sized businesses:

1. Proposal and quote drafting — AI pulls from your templates, past proposals, and pricing rules to produce a 70% draft in minutes, not hours. Your team reviews and finalizes.
2. Internal knowledge search — instead of your team digging through your shared folders, email, and chat for 20 minutes to find the same answer, an internal AI assistant that knows your business and gives the answer in five seconds.
3. Meeting summaries with automatic record updates — recordings turn into clean summaries plus auto-updated customer list entries.
4. Inbox sorting and quick first replies — incoming messages get categorized, and routine ones get a draft reply your team approves before it goes out.
5. Recurring reports that build themselves — the weekly leadership update, the monthly board summary, the customer status report. The data is pulled automatically on schedule, turned into a plain-English summary, and ready for review. The 2–4 hours someone currently spends every week goes back into the business.

Every piece of work we build includes five safeguards by default: only the right people can touch each piece of data, a person still signs off on anything customer-facing, passwords and keys are stored securely, there's a record of who did what, and there's always a way to undo it if something goes wrong.

I've delivered this kind of work in live use before — AI assistants at a 20,000-staff Canadian organization that saved the work of 1.3 full-time employees in the first year, and an automation that saved nearly half a full-time employee's work from a single bill-paying clerk processing 500+ invoices a day. The patterns travel to smaller businesses too.

The middle path is what I do most often: be your tech leader on retainer, without the full-time salary.

Most businesses your size are stuck in a familiar bind. Your office manager or operations lead has quietly become the default IT person. Decisions get made under pressure — picking software because a vendor cold-called, renewing licenses you don't fully use, putting out fires nobody wants to own. Meanwhile you keep meaning to make a real plan and never quite get there.

Here's what it looks like:

1. A two-hour planning meeting each month — we talk through what's coming up next quarter, vendor renewals, security questions, AI questions, and anything else on your plate.
2. A rolling tech plan — what's running today, what needs attention, what's worth investing in over the next 12 months.
3. Tech-contract reviews — before you sign or renew, I look at the contract, the alternatives, and what you're actually getting.
4. Someone you can call — when something breaks, when a vendor is pressuring you to make a decision you don't understand, or when an employee asks you to approve a new tool.
5. Ongoing light-touch tech oversight — basic security checks, software-license cleanup, documentation, and keeping track of what hardware you own.

You get experienced tech judgment on call without having to add a $200,000-a-year role to your team.

Honest answer: probably yes — and most Canadian small businesses I look at are using around 20% of what they're paying for.

Depending on which Microsoft 365 plan you're on, you may have access to a powerful set of tools you've never turned on: automatic workflows (Power Automate), business dashboards (Power BI), simple apps (Power Apps), document workflows (SharePoint), surveys and forms, smart lists, and the AI assistant (Copilot — usually a paid add-on). Most are gathering dust because nobody's had time to figure out which would actually help and which are just more software to learn.

What I usually do:

1. A Microsoft 365 review — what plan you're on, what tools come with it, what you're using, what's not turned on, where you're double-paying for things Microsoft 365 already gives you, and whether upgrading to a higher tier is worth it for your team.
2. A look at what you could automate — usually 3–6 candidates in any business: approval workflows, turning form submissions into records, getting alerts when things happen, scheduling, moving documents between folders automatically.
3. A check on whether Microsoft's AI assistant (Copilot) is worth turning on — what data needs cleaning up first, what guardrails you need, and whether the per-user cost is actually worth it for your team.
4. A plan to keep it from becoming a mess — who can build what, what gets reviewed, what gets recorded. Without rules, these Microsoft tools turn into a forest of half-finished apps nobody owns.
5. A plan with priorities — what to do first, what's not worth doing yet, and what to leave alone entirely.

The pattern I see most: businesses turn on Microsoft's automation tool, build three workflows, abandon two of them, and decide the tool doesn't work. The tool works fine. The setup didn't.

And if you're not on Microsoft 365 at all, or you're on the most basic plan, we'll start by talking about your goals and whether Microsoft is even the right fit. Sometimes it is. Sometimes there's a better path.

Yes — and the timeline and price depend on what you actually need, which is usually less than people expect.

I run three website packages so you can pick the right fit:

1. Basic — $1,000, 1–2 weeks. A 1–3 page modern site for businesses that don't have one yet, or have something they want refreshed quickly. Mobile-friendly, contact form, Google visibility, 12 months of free hosting included.
2. Standard — $3,500, 2–3 weeks. A 5-page site with copywriting, content arranged around your business, full Google integration, and a contact form that routes messages to the right place. The right fit for most growing small businesses.
3. Premier — $9,500–$12,000, 4–6 weeks. 8–12 pages with premium visual design, scroll-driven motion, copy written to turn visitors into customers, custom imagery, full search visibility, a dashboard you can use yourself to see what's working, and optional booking or online-store features. This is the flagship — and yes, the Timberlea Consulting website you're reading is built in the Premier style, so you can judge for yourself.

Every package includes the things buyers actually care about: it works on phones, it loads fast, it shows up on Google, and you own what we build.

The two delivery paths:

• Self-hosted — we build the site and hand it over. You host it wherever you like. We're done at delivery.
• Hosted with us — we build the site AND keep it running ongoing. Add the Hosting & Domain Care add-on ($55/month) and you never think about the technical side again.

You don't need an AI strategy deck. You need to know which two or three repetitive things your team does every week that AI can take off their plate — and which ones it can't do safely yet.

Start with a two-week AI Starter Plan that identifies the highest-value workflow candidates and gives you a plan with priorities. Then pick one and either take it forward yourself or do it together as an AI Workflow Review. The deliverable is a plain-English document, not a 200-page slide deck.

Casual usage is a different muscle than everyday use. ChatGPT in someone's browser tab is helpful for one-off questions, but it never turns into real hours saved unless you wire it into the work itself — your customer database, your inbox, your document tools, your reports.

The bridge is the AI Starter Plan: we look at what you've already tried, find which experiments could become repeatable workflows, and pick one concrete first build. That's the difference between "we use ChatGPT sometimes" and "the Monday morning report writes itself now."

Yes. The work I've seen the highest return on for Canadian small businesses: proposal/quote drafting, internal knowledge search, meeting summaries with auto-updated customer list entries, inbox sorting with quick first replies, and recurring reports that build themselves. Every piece of work includes five safeguards by default: only the right people can touch each piece of data, a person still signs off on anything customer-facing, passwords and keys are stored securely, there's a record of who did what, and there's always a way to undo it if something goes wrong.

Yes — this is one of the highest-impact AI projects for any business with documents scattered across folders. An AI assistant pointed at your real documents (with the right permission rules so it only shows each person what they're allowed to see) typically turns a 20-minute hunt into a 5-second answer.

The work means cataloging your existing documents, setting up the assistant, getting the permissions right (so the assistant doesn't show finance docs to people outside finance), and training the team on how to ask. Usually 4–8 weeks depending on how many documents you have.

Most Canadian small businesses I look at are using around 20% of what they're paying for. Depending on which Microsoft 365 plan you're on, you may have access to automatic workflows (Power Automate), business dashboards (Power BI), simple apps (Power Apps), document workflows (SharePoint), surveys and forms, smart lists, and the AI assistant (Copilot — usually a paid add-on). The Microsoft 365 Automation Plan reviews what you have, finds the high-value automation opportunities, sets up guardrails so it doesn't become a mess, and gives you a plan with priorities.

Probably yes, with guardrails. GitHub Copilot and similar tools genuinely lift developer productivity, but rolling them out without an IP policy (intellectual property — who owns what the AI helps write), a security setup, and a measurement plan tends to create a different set of problems six months in.

What I do: a security posture assessment, a GitHub Advanced Security setup plan, a Copilot governance and AI coding policy (what code can the AI see, what can it suggest, what gets flagged), and a way to measure whether it's actually helping.

Honestly, this is the easiest place to start because there's no legacy to worry about. The Basic package was designed exactly for this — $1,000, 1–2 weeks, fully done-for-you.

You bring me your business name, what you do, who you serve, and any photos or info you have. I handle everything else: the domain registration, the design, the copy structure (working from what you tell me), the Google search and Google Maps visibility, the contact form with auto-reply, the security, and 12 months of free hosting.

If you want zero hassle after launch, add Hosting & Domain Care at $55/month and we keep it running ongoing — domain, security, monitoring, small fixes, all handled. You can stop or change it anytime after the first 3 months.

Most businesses in your situation have a real professional web presence in about two weeks, from start to finish.

Yes — and faster and cheaper than people expect. I run three packages: Basic ($1,000 · 1–2 weeks), Standard ($3,500 · 2–3 weeks), and Premier ($9,500–$12,000 · 4–6 weeks). Plus two ongoing options: Maintenance & Growth ($350–$500/month) and Hosting & Domain Care ($55/month, available with any build).

This is the new "Show Up in AI Search" service — $3,500–$5,000 · 2 weeks. We restructure your site so AI can actually extract clean answers from it, add the invisible tags that tell AI systems exactly who you are and what you do, set up a real process for collecting customer reviews, and get you listed in the directories and credibility sources AI looks for before citing you. By the end, when someone asks ChatGPT or Google's AI "who does X in Halifax," you've got a fair shot at being one of the names that comes back.

This is the question I hear most often now, and it's the right one to ask first.

This is what people call "Shadow AI" — your team using AI tools you don't officially know about. Your team is experimenting with ChatGPT, Microsoft Copilot, Claude, and a half-dozen others. Data is going into those tools in ways nobody has mapped: customer information, internal documents, contracts, financial details. Policies haven't caught up.

I usually do a short AI usage audit, a plain-English AI use policy (three pages, not thirty), an approved Microsoft 365 Copilot rollout plan if you're already on Microsoft 365, and build four safeguards into every piece of work we automate going forward: only the right people can touch each piece of data, a person still signs off on anything customer-facing, passwords and keys are stored securely, and there's always a way to undo it if something goes wrong.

The goal isn't to stop your team from using AI. It's to give them a safer way to do it.

Probably not. The pattern I see most often: someone in operations built three or four automations during a busy quarter, they work, nobody documented them, and now those workflows are quietly handling customer data, payments, or internal records with no review and no clear owner.

What I do: walk through each existing automation, write down what it does, check what data it touches, identify who owns it, and write a short "what to do when it breaks" guide. Then a security check on permissions, passwords, and activity records. Usually 1–2 weeks for a small set of automations.

The middle path is the Tech Advice on Retainer service: a two-hour planning meeting each month, a rolling tech plan, tech-contract reviews, someone you can call, and light-touch tech oversight. You get experienced tech judgment on call without adding a $200K role.

Yes — that's the Tech Advice on Retainer service. Specifically: I take over the tech-decision burden. Vendor calls, renewal decisions, AI questions, employee tool requests, the "should we move to X" conversations — they come to me first. You stay informed, but you stop being the only one carrying it.

Most engagements run 6–18 months. Many start after an initial assessment surfaces the biggest gaps and we agree on a roadmap to close them.

Fair concern, and I price the work to absorb that risk for you. The AI Starter Plan ($6,500) ends with a plan with priorities. If the plan doesn't surface at least one workflow where the math works (hours saved × hourly cost > project cost in under 12 months), I'll tell you that — and we don't proceed.

For builds, I quote against the specific workflow we agreed on. The hours-saved math is written into the proposal. If the work doesn't deliver what was agreed, we keep working until it does or refund the difference.

No. Documentation is part of every project — not an add-on. You get a plain-English guide for what the workflow does, who owns it, where the data flows, and what to do when it breaks.

You also get 30–60 days of post-launch support depending on the project size. After that, you have three options: take it from there yourself, retain me as needed for occasional fixes, or move to a Maintenance & Growth retainer if it's a website, or a Tech Advice on Retainer if it's broader tech work.

Three honest reasons. First, your data stays in Canada. Canadian privacy laws apply (PIPEDA, and provincial laws in some places), you're billed in Canadian dollars, and there's no cross-border data transfer to argue about. Second, the real-world record: 20 years across federal government, BlackBerry, and banks — including AI assistants at a 20,000-staff Canadian organization that saved the work of 1.3 full-time employees in the first year. Third, you talk to me. Every time. No project manager in the middle, no offshore implementation team, no big-firm partner who sells the work and disappears.

I'm not for every project. If you need 300 consultants on a 12-month transformation, that's a big consulting firm. If you need planned, accountable, plain-English work for a Canadian small business — that's what we do.

Yes. We reserve one reduced-fee or free slot per quarter for non-profits and community groups where the work matters and our advertised price doesn't fit. The principle: generosity that's bounded enough to be sustainable — one slot per quarter so it's never a maybe, but also never an empty promise.

How to inquire: tell us what you're trying to do, who it serves, and what you can realistically contribute. We'll figure something out together.