Pasting a client file into a public AI tool may involve a communication outside Québec.
Depending on the tool, where it is hosted, and the information shared, Law 25 may govern that communication. Few small businesses know this risk. Once you understand the issue, you can put a clear framework around your use of AI. The kit walks you through your compliance file, one document at a time. You add your information and finish with a file that is to adapt and have reviewed.
Six short modules, about 2 hours 45 minutes. Work at your own pace, whenever it suits you, with no required videos. By the end, your compliance file is assembled.
Preview the documents before you submit your email.
Two screens from the kit, redrawn exactly. On the left, Module 0 shows your starting assessment and the zone to address first. On the right is the section 17 assessment it points you toward. The example uses a fictional company; you enter your own information.
Your weakest zone: Outside Québec. Start with your Law 25 assessment to adapt and your registers (Module 03). One piece filled in, and this zone turns green.
Ten statements, one result per zone. Your starting point is clear.
Approved on ______________ · 228 · AI UNDER CONTROL
Fill in your fields and check your measures on the left side of the screen. The document takes shape on the right, as shown here. All eight sections are shown in full.
The first screen names your weak zone. The second fills it in. This is how the whole kit works: each module adds a piece to your file.
Two screens out of six. Your documents take shape in your browser as you enter your information, and nothing is sent to us.
Much of the work is already done.
Here are the four documents you hold at the end, and what each one is for.
Your AI use policy, to adapt and have reviewed
A clear framework for your team, written once. Date it, post it and make sure everyone knows what may go into AI. The first document in your file.
What may go into AI, and what never does
Your data map and enterprise mode configured. You know what your team may use each day and under what conditions. A clear reference for avoiding mistakes.
Your Law 25 assessment, section 17, to adapt
You fill it in with your information, and your registers come with it. The heavy lifting is already structured for you. To adapt and have reviewed.
Your plan for the next 30 days, and everything in one place
The steps to take, in order, with your complete file gathered in your 228 Toolkit and ready to download. You know what to do next.
You leave with a file you can date, sign and show, because you filled it in yourself, with your information.
Business owners who use AI and want to do it properly.
The kit helps you use AI in your business while complying with Law 25, without requiring you to become a legal expert.
- You already use Claude or Copilot in your business, or you are about to start.
- You hold information about clients, employees or suppliers, and you want to frame what goes into AI.
- You want to leave with filled-in documents, to adapt to your business.
- You like moving at your own pace, on your own time, with nothing to watch.
- Your team works in both French and English: both versions are included, each in its own language.
- You are looking for formal legal advice on your specific situation. The kit structures your file; a legal professional can then review it.
- You want everything handled for you. In that case, 228 OPERATORS can review your whole operation.
- You use no AI tool and do not plan to. The kit has no purpose for you today.
Six short modules. A compliance file at the end.
About 2 hours 45 minutes in total. What you fill in at each module adds to your 228 Toolkit.
Ten statements, one verdict per zone. You see where you stand and where to start.
Answer a few questions and your policy takes shape on screen. You receive a dated document that is ready to post for your team.
A map of what may go into AI and what never does, along with the enterprise mode setup. It gives you a clear reference for daily use.
You add your information, and your Law 25 assessment fills in live, with your registers. The key document in your file, to adapt and have reviewed.
The steps to take over 30 days, in order, with an announcement email ready for your team. You know where to start tomorrow.
All your documents gathered in one place, to download, adapt and have reviewed.
Six modules · about 2 hours 45 minutes · your complete compliance file
40 MINUTES
Your Law 25 assessment, filled in with you.
Depending on the tool, where it is hosted, and the information shared, pasting identifiable information into a public AI tool may be a communication outside Québec under section 17 and may call for a written assessment. For a specific situation, seek legal advice. Few small businesses know it, and that is exactly what this module addresses. Add your information and the assessment takes shape on screen. You receive a document to adapt and have reviewed, along with your registers. The process is already laid out.
The legal framework, presented as documents you complete.
The content is grounded in the text of Law 25 and the public guidance of the Commission d'accès à l'information (CAI), not in opinion.
The kit fills the space between a free online template that explains the principles and consulting work that costs several thousand dollars. The process is already laid out.
The running example follows a concrete case: a client file entered into an AI tool. The structure can be reused; adapt it to your situation, your business and your tools.
A practical compliance tool. The kit is not legal advice and does not replace consulting a legal professional for your specific situation.
What to know before you start.
Give your use of AI a clear framework in one evening.
Your signed policy, data rules, filled-in Law 25 assessment and 30-day plan are gathered in one file, to adapt, review and keep.
The kit gives your use of AI a clear framework. When you want to know where automation could have the greatest effect, 228 OPERATORS can review your whole operation.