Frequently Asked Questions

Breach Pro tests buying questions in ChatGPT, Gemini, and Claude to see whether your business appears and which competitors are recommended. You receive a 12-to-14-page report, a comparison with up to three competitors, and priority fixes organized into a 90-day action plan.

Free Breach reviews your public website and suggests initial fixes. Breach Pro goes further with buyer questions, observed AI answers, competitor comparisons, and a personalized action plan. The free diagnostic is not a prerequisite for the Pro audit.

Your PDF report is delivered within three business days after we receive your completed questionnaire. A 45-minute debrief with Dominic is included to review the findings, answer your questions, and help your team put the plan into practice.

The audit costs $999 CAD plus applicable taxes, as a one-time purchase. Complete the questionnaire, then pay securely online. The report and 45-minute debrief are included.

Yes. The plan sets out priority fixes and next steps. During the debrief, we walk through the plan with you so your team knows how to act on it. Carrying out the work on your website is not included in the audit price.

No. Nobody serious should guarantee placement in ChatGPT, Gemini, Perplexity, Copilot, or Google AI results. AI systems do not behave like stable ranked search pages. They select and synthesize answers from changing sources. Breach Pro provides a repeatable measurement baseline and a prioritized fix plan, not a guaranteed placement claim.

Breach Pro can show visibility, accuracy, competitor presence, source gaps, and changes over time. It can also help you look for AI-related signals in Search Console, Bing Webmaster Tools, analytics, CRM notes, intake forms, and customer conversations. But AI attribution is still imperfect: a mention in an AI answer is not automatically a lead.

Nord Paradigm is an applied AI consulting firm based in Chicoutimi (Saguenay), Quebec. It helps small and mid-size businesses and organizations assess their visibility in AI search, integrate AI into their workflows, and govern its use. Services include Breach diagnostics, Breach Pro audits, hands-on implementation, practical workshops, and AI governance, including ISO/IEC 42001 readiness. Services are available in English and French across Quebec and Canada. The approach combines hands-on AI practice with audit methods drawn from aeronautical quality management. Nord Paradigm acts as an implementation advisor, not a certification body.

Nord Paradigm was founded by Dominic-André Leclerc, a 21-year veteran of the Royal Canadian Air Force who retired at the rank of Warrant Officer. He served as an avionics systems technician and AF9000+ Lead Auditor, responsible for quality management compliance across complex military aviation systems. He is pursuing ISO/IEC 42001 Lead Auditor and IAPP AI Governance Professional (AIGP) certifications to formalize his AI governance practice alongside his existing audit credentials.

Nord Paradigm Inc. is headquartered at 393, rue Racine Est, 4e étage, Chicoutimi, Quebec, G7H 1T2, Canada. The firm is registered in Quebec and serves clients across Canada either remotely or on-site. Being based in the Saguenay region positions Nord Paradigm to serve regional Quebec SMBs that are often underserved by Montreal and Toronto consultancies, while still working with national clients.

Yes. Nord Paradigm can work with organizations outside Quebec when the mandate fits. The current primary market is French-speaking Quebec, with most engagements delivered remotely and on-site work available when scope justifies travel. English-language delivery is available for Canadian and international teams that need it.

Yes. French is the primary working language for the current Quebec market, and English delivery is available when the organization or partner context requires it. Reports, audits, policies, workshops, and client communications can be produced in either language, with professional Quebec French standards for organizations operating under Loi 25.

Nord Paradigm offers audit-grade rigor without Big Four overhead. Big Four engagements typically allocate senior partners to scoping calls, then hand delivery to junior staff, and bill accordingly. With Nord Paradigm, the founder runs the engagement directly. The methodology is rooted in AF9000+ aeronautical auditing, where evidence chains and structured remediation are non-negotiable. Smaller firms also move faster: a gap analysis closes in weeks, not quarters.

Nord Paradigm supports SMBs with AI visibility and GEO, AI implementation, practical workshops, and governance, including ISO/IEC 42001 readiness. Breach is the free public-signal diagnostic; Breach Pro is the human-validated AI visibility audit with buyer questions, competitors, sources, and a prioritized plan. Each service can be approached directly according to the need. A Breach diagnostic is not a prerequisite for the other services. Prism remains in development as an internal AI governance audit platform.

Most organizations can start with the free Breach diagnostic at breach.nordparadigm.com. It reviews the public website and its trust signals, then prepares a practical baseline of what is clear, what is missing, and what to fix first. A report usually takes a few minutes. Organizations ready for measured buyer-question testing and competitor comparison can go directly to Breach Pro; the free diagnostic is not a prerequisite.

Breach is a free automated public-signal diagnostic for small and mid-size businesses. It checks whether the public website clearly describes the business, supports important claims with visible proof, and remains technically readable. It produces a fast baseline of what is clear, what is missing, and what to fix first.

Buyers increasingly ask tools like ChatGPT, Perplexity, Gemini, Copilot, and Google AI for recommendations before they visit websites. A buyer might ask who to hire, which local provider is reliable, or which company solves a specific problem. If the assistant names competitors, directories, or outdated information, the lost opportunity may never show up cleanly in your analytics.

Yes. AI assistants can omit a business, recommend competitors, or answer from incomplete sources. Free Breach reviews the controllable public signals that influence how systems interpret a business. Breach Pro adds documented buyer-prompt probes, named competitor observations, visible sources when available, and a prioritized plan.

Free Breach reviews the public website for business identity, service clarity, visible proof, trust signals, structured and technical readability, and source gaps such as business profiles, reviews, third-party profiles, testimonials, case studies, and outdated claims. Breach Pro adds documented buyer-prompt testing and named competitor and source evidence.

Free Breach provides a practical public-signal report showing what the website communicates clearly, which proof or trust signals are missing, where technical readability needs attention, and which fixes should come first. Breach Pro adds documented prompts, observed AI answers, named competitors, visible sources when available, human validation, and a prioritized 90-day plan.

No. Free Breach provides a transparent public-signal baseline rather than claiming a stable AI ranking. Its score reflects controllable website clarity, public proof, trust signals, and technical readability. Breach Pro adds documented prompt observations, competitor and source evidence, and human validation.

Breach is designed for owners, executives, marketers, and SEO partners at small and mid-sized businesses who want a concrete view of how AI-assisted discovery sees the business. It is especially useful for service businesses, professional firms, local companies, and Quebec SMBs that need bilingual visibility checks.

Prism is a deeper internal AI governance audit platform currently in development. Its intended scope includes AI systems, risk posture, policies, controls, evidence, and organizational readiness aligned with ISO/IEC 42001. Current governance and ISO readiness needs are handled separately through ISO 42001 advisory engagements.

Prism is currently in development as Nord Paradigm’s dedicated governance audit. Interested organizations can join the waitlist at nordparadigm.com. In the meantime, organizations can access gap analysis, policy design, internal audits, and certification handoff through Nord Paradigm’s ISO 42001 advisory engagements.

Breach Pro is a 12-to-14-page AI visibility audit delivered within three business days, with documented buyer prompts, up to three observed competitors, visible sources, human validation, web priorities, and a 90-day plan. Prism is a deeper internal governance audit platform still in development. Responsibilities, policies, controls, evidence, internal audits, and certification handoff belong to scoped ISO 42001 advisory engagements.

ISO/IEC 42001 is the first international standard for AI management systems, published in December 2023 by ISO and IEC. It specifies the requirements for establishing, implementing, maintaining, and continually improving an AI management system within an organization. The standard covers governance, risk management, AI impact assessments, data governance, and lifecycle controls. It is rapidly becoming the global baseline for demonstrating responsible AI practices, similar to how ISO 27001 became standard for information security.

Preparing for an ISO/IEC 42001 audit starts with a gap analysis between your current practices and the standard’s requirements and reference controls. Next comes designing the governance documentation: AI policy, risk management framework, roles and decision rights, AI system impact assessments, and lifecycle controls. The system then has to operate long enough to produce verifiable evidence, followed by an internal audit and readiness review before the external certification audit. An organization already mature on ISO 9001 or ISO 27001 usually moves faster. Nord Paradigm prepares the organization; an independent accredited body performs the certification.

No. ISO/IEC 42001 is voluntary in Canada. However, it is becoming a de facto requirement in EU procurement and a pragmatic baseline in the absence of federal Canadian AI legislation, since AIDA died on the order paper. Canadian organizations selling to or partnering with European entities, or operating under Quebec’s Loi 25 and Ontario’s AI hiring disclosure rules, increasingly find ISO 42001 referenced in due diligence questionnaires.

End-to-end ISO 42001 implementation typically runs 6 to 12 months for mid-sized Canadian organizations, depending on existing governance maturity and the complexity of the AI systems in scope. A standalone gap analysis can be completed in 2 to 4 weeks. Full readiness for an external certification audit usually takes 3 to 6 months once gap remediation begins. Organizations with mature ISO 9001 or ISO 27001 systems move faster.

Implementation means building the AI management system: writing policies, designing controls, running risk assessments, training staff, and operating the system long enough to generate evidence. Certification is the formal attestation by an accredited external auditor that the system meets ISO/IEC 42001 requirements. An implementation advisor like Nord Paradigm prepares the organization. An accredited certification body conducts the certification audit and issues the certificate.

No. Certification bodies must be accredited by a national authority, in Canada the Standards Council of Canada, and are kept structurally independent from implementation advisors to avoid conflicts of interest. Nord Paradigm prepares organizations for the external audit. Accredited certification bodies in Canada include MHM, DEKRA Canada, and CSA Group. Nord Paradigm coordinates the handoff to the chosen certification body.

A full ISO 42001 implementation engagement runs in five phases: gap analysis against ISO 42001 clauses and Annex B controls; policy and governance design covering AI policy, risk framework, roles, decision rights, and escalation paths; control implementation operationalizing risk management, AI impact assessments, data governance, and lifecycle controls; an internal audit and readiness review based on AF9000+ audit methodology; and certification handoff with documentation support for the external audit. Each phase is independently scopable.

ISO 42001 implementation costs vary with organization size, the number of AI systems in scope, existing governance maturity, and the level of advisory involvement. Gap analyses are generally offered at a fixed fee. Full engagements usually combine ongoing advisory support with defined project deliverables. Nord Paradigm provides scoped proposals after an initial discovery conversation rather than publishing per-day rates.

AF9000+ is the Royal Canadian Air Force’s quality management standard for aviation maintenance organizations, derived from ISO 9001 with additional aeronautical safety requirements. The underlying audit discipline transfers cleanly to AI management systems. Both demand documented processes, traceable decisions, risk-based thinking, and continuous improvement. ISO/IEC 42001 sits in the same management-system family as ISO 9001, so a senior AF9000+ auditor reading ISO 42001 sees familiar architecture and applies the same evidence standards.

AI governance consulting at Nord Paradigm covers policy development, risk assessment methodology, accountability structures, AI impact assessments, lifecycle controls, and alignment with Loi 25, ISO/IEC 42001, the EU AI Act, and Canadian privacy law. Engagements typically include gap analysis against an applicable standard, design of governance documentation, implementation support, and an internal pre-certification audit. The end goal is an AI management system the organization can maintain on its own.

Nord Paradigm also takes on selected custom engagements that do not follow a standard ISO 42001 readiness path. They may include AI policy reviews, vendor due diligence support, board-level governance briefings, incident response planning, or decision support during an AI deployment. These engagements are accepted when the need, scope, and responsibilities are clearly defined.

Nord Paradigm focuses on small and mid-sized Canadian organizations, particularly Quebec SMBs, professional service firms, and regional businesses adopting AI tools faster than their governance can support. Engagements range from a fixed-fee gap analysis for a 25-person firm to a multi-phase ISO 42001 readiness program for an organization with hundreds of staff. Nord Paradigm takes on work whose scope fits the capacity of a specialized firm.

The methodology is rooted in AF9000+ aeronautical audit discipline. In military aviation, audit findings are evidence-based, traceable, and tied to corrective actions with clear ownership. That same structure applied to AI management systems produces governance documentation that survives external scrutiny, whether from a certification body, a privacy regulator, or an EU procurement officer. The result is governance that is documented, traceable, and ready for external review.

Yes. Nord Paradigm prepares practical AI workshops around the tools, tasks, questions, and experience level of each team. Participants work through relevant examples and guided exercises. Governance, privacy, and risk can be included when they matter, but they are only part of the broader custom offer.

Workshops are for teams that want to use AI more effectively in their real work, from beginners to experienced users. A session can bring leaders and practitioners together or focus on one group. The participants, tools, and desired result are defined before the workshop so the examples fit the people in the room.

Yes. Workshops are available in French or English, online or in person. In-person delivery is available in Saguenay-Lac-Saint-Jean and elsewhere in Quebec or Canada depending on the location and engagement.

Yes. Every workshop starts with a short framing conversation about the participants, tools, tasks, and desired result. Nord Paradigm then prepares the examples and exercises for a focused 90-minute, half-day, or full-day session. The organization receives the tailored exercises and a concise reference sheet afterward.

Possible topics include using Claude, ChatGPT, or other generative AI tools; writing better instructions and useful context; analyzing, summarizing, and preparing documents; creating a repeatable AI-assisted workflow; protecting sensitive information; checking AI output; or exploring a tool or need specific to the organization. The final topics are selected with the client before the workshop.

Loi 25, formally An Act to modernize legislative provisions as regards the protection of personal information, is Quebec’s privacy law. It applies to any business handling personal information of Quebec residents and includes specific obligations relevant to AI: transparency about automated decision-making, the right to human review of algorithmic decisions, and privacy impact assessments for new technologies. AI systems that touch personal data of Quebec residents must comply, regardless of where the business is headquartered.

Loi 25 applies to any business that handles the personal information of Quebec residents, including SMBs. The main obligations include: appointing a person responsible for the protection of personal information; obtaining clear consent and limiting collection to what is necessary; informing individuals of the purpose of collection and keeping that information current; reporting confidentiality incidents that present a risk of serious harm; governing the disclosure of information to vendors, including outside Quebec; and conducting a privacy impact assessment for sensitive technology projects. For AI systems, Loi 25 adds transparency about automated decisions and the right to human review. An SMB tends to reduce its risk by first mapping where personal information lives and how AI uses it.

No. The Artificial Intelligence and Data Act (AIDA), the federal AI bill bundled into Bill C-27, died on the order paper when Parliament was prorogued. There is currently no replacement federal AI bill on the horizon. Canadian AI regulation is therefore fragmented across provincial laws like Loi 25, Ontario’s AI hiring disclosure rules, federal privacy law (PIPEDA), and the extraterritorial reach of the EU AI Act. ISO 42001 increasingly serves as the pragmatic anchor.

Yes, in many cases. The EU AI Act has extraterritorial reach. It applies to any organization placing AI systems on the EU market, providing AI services used in the EU, or whose AI system outputs are used in the EU. Canadian companies selling to European customers, supplying European partners, or processing data on EU residents may fall within scope. ISO 42001 conformance is increasingly cited in EU procurement due diligence as evidence of responsible AI management.

Bill C-27 was the federal Digital Charter Implementation Act, which bundled three pieces of legislation: the Consumer Privacy Protection Act, the Personal Information and Data Protection Tribunal Act, and the Artificial Intelligence and Data Act (AIDA). The bill died on the order paper. Its components, including AIDA, are not currently law and have no scheduled return. Canadian organizations should plan against existing provincial law and international standards rather than waiting for federal action.

Canadian businesses should prepare for Loi 25 if they handle personal information of Quebec residents, Ontario’s Working for Workers Four Act provisions on AI in hiring if they recruit in Ontario, federal PIPEDA for personal information generally, and the EU AI Act if they have any European exposure. ISO/IEC 42001 provides a structured framework that covers the underlying obligations across all of these regimes and serves as a defensible baseline if and when federal AI legislation returns.

AI visibility is how your business appears when someone asks tools like ChatGPT, Perplexity, Gemini, Copilot, or Google AI questions about your category, service, or local market. It is not just whether your website ranks on Google. It is whether AI assistants can understand what you do, trust the available information, and include you when answering buyer questions.

Partly, but not completely. Good SEO still matters: crawlable pages, clear service descriptions, reviews, local profiles, useful content, accurate business information, and technical health. AI visibility adds a different layer: testing how assistants answer buyer-style prompts, which competitors are selected, what sources are used, and what gaps weaken trust.

AI answers vary by prompt wording, tool, location, personalization, source availability, and time. That is why Breach Pro uses controlled prompt sets and dated observations to create a documented baseline. The output is visibility evidence and directionally useful measurement, not an absolute ranking.

Start with fundamentals: crawlable pages, clear service and location pages, accurate business profiles, consistent contact details, strong reviews, credible third-party profiles, proof assets, case studies, and content that answers real customer questions. AI assistants need extractable trust signals, not tricks.

Not as a magic fix. Google says special AI files or markup are not required to appear in its generative AI search features. Structured data can still help as part of normal SEO, but the priority is clear pages, accurate business data, consistent profiles, useful proof, and customer-focused content.

No. More generic AI content can make a site less useful and less credible. Better content usually means specific, current, experience-based pages that answer real buyer questions with examples, proof, and clear service information.

Yes. Free Breach can review the English and French public signals a bilingual market depends on. Breach Pro adds documented English and French buyer prompts, local phrasing, service-area language, and observations of how assistants describe the business in both languages.

Nord Paradigm does not publish a fixed price for an AI roadmap, because the cost depends on the real scope of the engagement. The main factors that make the price vary are: the number of AI systems and use cases to examine; the governance maturity already in place; the number of websites, brands, or languages to cover for AI visibility; the depth of competitive analysis requested; the level of implementation support afterward; and the applicable regulatory obligations, such as Loi 25 or a European procurement requirement. A scoped gap analysis is generally offered as a fixed fee, while a full roadmap combines a fixed fee with support. Pricing is shared after a short discovery conversation, once the scope is clear.

Nord Paradigm’s service ladder starts with the free Breach diagnostic. The BREACH Pro audit is a one-time purchase of $999 CAD plus applicable taxes. The AI Implementation Partnership is $999 CAD per month, plus applicable taxes, and is designed as a 90-day program. Any client may cancel after the first month and pay only for that month. Governance, ISO 42001 support, workshops, and other custom advisory work are scoped per engagement.

Custom software, complex integrations, and production infrastructure may require a qualified technical partner. The appropriate path is determined with you, with no partner imposed and no automatic promise of external delivery.

An AI workshop is prepared training that helps a team understand and practise methods connected to its work. An implementation engagement is intended to deliver or build a functioning process in the organization's environment.

The AI Implementation Partnership includes two 60-minute working sessions each month and unlimited messaging support. It costs $999 CAD per month, plus applicable taxes, and is designed as a 90-day program. It also includes a monthly report of verified time saved, estimated value, costs, actual use, and rework. Any client may cancel after the first month and pay only for that month. See the full offer.

Start with your business need: AI visibility, implementation in a work process, a team workshop, or governance. Free Breach provides an initial view of the public website; Breach Pro examines visibility on buyer questions in more depth. You can also book a free 20-minute discovery conversation to define an implementation, training, or governance engagement without first using Breach.

A free Breach report usually takes a few minutes. Breach Pro is delivered within three business days and includes a 45-minute screen-share debrief. The AI Implementation Partnership is designed as a 90-day program and includes two 60-minute working sessions per month plus unlimited messaging support. A scoped ISO 42001 or Loi 25 gap analysis typically takes 2 to 4 weeks; full ISO 42001 readiness commonly runs 3 to 6 months, and end-to-end implementation including external certification handoff can run 6 to 12 months.

Nord Paradigm typically responds within 24 to 48 hours on business days. Urgent matters should be flagged in the message subject. The firm operates on Eastern Time from Chicoutimi, Quebec, and is reachable in both English and French.