01 · AI Solutions
AI that is connected, governed, and earns its place.
We automate repetitive work, set up AI assistants safely, and fix the data rules first. One job at a time, measured, and stopped if it does not pay.
The AI stack, in three layers
Use
AI assistants
Microsoft Copilot, ChatGPT and Claude business plans
Connect
Workflow automation
n8n, GoHighLevel, your CRM, email and calendar
Govern
Data rules
Permissions, labels, Microsoft Purview and a written AI policy
The foundation goes in first
Real gains. Smaller and less even than the hype.
That is why we pilot before we promise anything.
5.4%
of work hours saved by people who used generative AI the week before. About 2.2 hours of a 40-hour week. Self-reported.
One work week: 5 days of 8 hours
+14%
more issues resolved per hour for customer-support agents given an AI assistant, in a study of 5,179 agents.
No effect
on earnings or recorded hours across 11 occupations and 25,000 workers in Denmark. Users reported saving 2.8% of their time.
Upper bound of any effect: 1%
17–20%
of US businesses used AI between December 2025 and May 2026. Under 20% of firms with four or fewer employees.
Of every 100 US businesses, about 19 (the midpoint of 17–20)
So we start with repetitive work that a person can check, and we measure it.
Automate the steps. Assist the judgment.
They need different tools and different safeguards, and mixing them up is where projects go wrong.
Workflow automation
The steps are always the same
A web form arrives, a contact is created, a text goes out, a task is assigned. Nothing varies, so it is predictable and easy to test.
Best for Lead intake, reminders, routing, syncing data between apps
Typical tools n8n, GoHighLevel workflows
AI assistants
The content changes every time
Drafting a reply, summarizing a thread, pulling fields from a messy PDF. The output varies, so a person checks it.
Best for Drafting, summarizing, searching your own files
Typical tools Microsoft Copilot, ChatGPT, Claude
Our rule: the best first projects are plain automation with one AI step and a person at the checkpoint, not an agent running loose.
Four workflows worth building first
Each one has a trigger, a few predictable steps, at most one AI step, and a person at the checkpoint.
TriggerAutomatic stepAI stepPerson decides
New lead intake
Web form or missed call
Contact created in the CRM
Acknowledgment text or email
A person follows up
Tool GoHighLevel
Rule Every lead gets the same first response, and a person owns the next step.
Quote follow-up
Quote sent, no reply
Wait a set number of days
AI drafts the nudge
A person approves the send
Tool n8n or GoHighLevel
Rule Draft only. Nothing goes to a customer unreviewed.
Reminders and review requests
Appointment booked
Reminder before the visit
Review request after it
You read the replies
Tool GoHighLevel
Rule Only contacts who opted in, with the consent recorded.
Inbox and document triage
Email or PDF arrives
AI pulls the key fields
Sorted into a sheet or folder
A person spot-checks a sample
Tool n8n with Microsoft 365
Rule Read-only access first, and a log of what it did.
Illustrations of typical workflows. Yours are mapped in a short discovery before anything is built.
Three tools, three different jobs
We choose by the job, say so when a simpler tool is enough, and pilot anything new on a small scope first.
GoHighLevel
CRM and marketing automation in one place
What it does Contacts, pipelines, calendars, texting, email and workflows, plus Conversation AI and Voice AI add-ons.
Fits when Following up with leads and customers is the job.
Watch for US texting needs carrier registration, and usage-based charges need a budget.
n8n
Connects your apps with custom logic
What it does Runs a workflow whenever a trigger fires, linking forms, spreadsheets, accounting, email and APIs.
Fits when Data has to move between tools that do not talk to each other.
Watch for Someone has to own the credentials and the error alerts.
Microsoft Copilot
An assistant inside Word, Outlook and Teams
What it does Drafts, summarizes and searches using content each person can already open. Prompts and data are not used to train the underlying models.
Fits when People spend real time drafting, summarizing and searching.
Watch for Loose file permissions, because it surfaces whatever a person can open.
We decline: consumer accounts for business data · tools with vague privacy terms · giving an assistant more access than the job needs.
Texts, calls and AI voices have rules
An automation that contacts the wrong people is a legal problem, not a technical one. General information, not legal advice.
AI voices on calls
In February 2024 the FCC confirmed that the TCPA’s limits on an “artificial or prerecorded voice” cover AI technologies that generate human voices, so these calls need the called party’s prior express consent.
Texts from local numbers
In the US, texting from standard 10-digit local numbers needs A2P 10DLC registration: a brand, plus a campaign with sample messages, your consent process, a website and a privacy policy.
Proof of consent
The campaign has to document how contacts opt in and what consent language they see. We build the opt-in step and the records first, and your attorney should approve the wording.
People stay in charge
Every task gets one of three levels before anything is switched on.
People decide
- Pricing exceptions
- Hiring, discipline, promotion
- Refunds and complaints
- Legal and medical questions
AI can inform. It does not decide.
AI drafts, you approve
- Customer emails and quotes
- Public posts
- Anything a customer will read
- Replies on your behalf
The default for anything outward-facing.
AI does it, we spot-check
- Sorting and tagging
- Summaries for internal use
- Pulling fields from documents
- Meeting notes
Low risk, and sampled regularly.
The company answers for the bot. In 2024 a Canadian tribunal held Air Canada responsible for wrong advice its website chatbot gave a customer. It rejected the argument that the chatbot was a separate entity. Moffatt v. Air Canada, 2024 BCCRT 149
Illinois has a rule for hiring. Since January 1, 2026, employers who use AI in hiring, promotion or discipline must give notice, and may not use it in ways that discriminate. General information, not legal advice. Public Act 103-0804 summary
Four ways small businesses get hurt
None of these need a hacker. They need an ordinary Tuesday.
Tools nobody approved
78% of AI users bring their own tools to work.
Our rule An approved list and business-tier accounts.
Files shown to the wrong people
Microsoft Copilot surfaces whatever each person can already open, so loose permissions become the problem.
Our rule We clean up access before we switch it on.
Confident wrong answers
Microsoft says responses are not guaranteed to be 100% factual, and asks users to review before sending.
Our rule Draft and review is the default.
Assistants that can be tricked
Text hidden in an email or file can give an assistant orders. OWASP ranks prompt injection first, and excessive agency third, among LLM risks.
Our rule Read-only to start. The least access that works.
Before AI touches your files, fix who can see them.
Microsoft Copilot only shows what a person can already open, and Microsoft notes that generative AI amplifies the problem of oversharing. So the first job is access, not prompts. Microsoft Purview is the toolkit.
1
Find
Data security posture management for AI runs a weekly risk assessment of your 100 most-used SharePoint sites, counting sensitive items and links that anyone can open.
Needs Copilot licenses to monitor Copilot
2
Label
Sensitivity labels mark what is confidential, and Copilot honors the encryption rights on labeled files. Manual labeling is in Business Premium. Automatic labeling needs E5 or an add-on.
Manual labels: Business Premium
3
Limit
Data loss prevention can block sensitive data typed into Copilot prompts. Stopping Copilot from using files and emails with chosen labels needs higher licensing. Endpoint rules can warn or block pasting into outside AI sites.
Prompt rules: included. Label rules: higher tier
4
Watch
The audit log records Copilot interactions, and Microsoft’s Audit (Standard) for Copilot is listed for Business plans when Copilot is licensed. Audit (Premium) keeps records longer.
Standard audit: included
5
Keep
Retention policies can keep or delete Copilot prompts and responses on a schedule you choose.
Set by policy
Why guardrails matter. In June 2025, researchers disclosed “EchoLeak” (CVE-2025-32711), a flaw in Microsoft 365 Copilot where a crafted email could expose data without a click. Microsoft fixed it on its side and no attacks in the wild were reported. Purview can now also exclude external email from Copilot’s answers (in preview). The Hacker News · Microsoft Learn
Plans differ. Microsoft lists a Purview Suite add-on for Business Premium, capped at 300 seats, and licensing changes often. We check what your tenant actually includes before recommending anything. Purview service description
Source for the steps: Microsoft Purview for AI apps · DSPM for AI
Three lanes, one rule each
Public
Website copy, public price lists
Any approved tool.
Internal
Quotes, procedures, customer lists
Business-tier tools only, with sharing settings checked.
Sensitive
Health, card numbers, SSNs, passwords, legal files
Not in AI tools, unless a documented decision and a contract say so.
Business plans from OpenAI and Microsoft say your prompts are not used to train their models by default. Not used for training is not the same as not stored, so we also check retention and admin settings. OpenAI enterprise privacy · Microsoft Copilot privacy
The written policy follows NIST’s Generative AI Profile (AI 600-1, July 2024), which names 12 risks that are unique to or made worse by generative AI. Five matter most to a small business:
Confabulation
Data privacy
Information security
Human-AI configuration
Value chain and third-party tools
Five steps and a stop sign
Stopping is a valid result. The scope and price are agreed before we begin.
1
Pick one job
Where hours leak today.
2
Check access, set rules
Who can see the data, which lane, an owner.
3
Time it
A baseline, before any AI.
4
Run a small pilot
A few people. Real work.
5
Decide
On the numbers.
Keep
Adjust
Stop
Three ways to start small
Pick one, or tell us what you need. The scope and price are agreed in writing before work begins.
1
AI readiness review
Who can see what, which AI tools staff already use, and which Copilot and Purview settings apply. You get written findings and a ranked fix list.
2
One-workflow pilot
One job mapped, built in GoHighLevel or n8n, timed against a baseline, and judged on the numbers. Keep, adjust or stop.
3
Policy and training
A one-page AI use policy, an approved tool list, and a hands-on session with your own files and your own team.
Customers also ask AI who to call.
Getting found and cited by assistants is a separate job from using them. It has its own page.
13 · Next step
Find your first workflow.
A free conversation to see whether AI has real hours on the table for your business, and to tell you honestly if it does not yet.
FAQ
AI Solutions: common questions
Is our data safe with AI tools?
It can be when the tools are chosen and configured properly. We use business-grade services with contractual privacy terms, keep sensitive data out of consumer tools, check who can open which files before turning on an assistant, and set clear rules for what may be shared.
Should we use n8n or GoHighLevel?
They do different jobs. GoHighLevel is a CRM and marketing platform with built-in texting, email, calendars and AI features, so it often fits following up with leads. n8n connects other apps with custom logic, so it often fits moving data between tools like accounting, spreadsheets and Microsoft 365. We choose by the job, and sometimes a simpler tool is enough.
Can AI text or call my customers?
It can, with rules. In the US, texting from standard local numbers needs A2P 10DLC registration, and in February 2024 the FCC confirmed that AI-generated voices on calls count as an artificial voice under the TCPA, which requires the called party’s prior express consent. We build the opt-in step and records first, and your attorney should approve the consent wording.
What is Microsoft Purview, and do we need it?
Purview is Microsoft’s set of data protection tools: sensitivity labels, data loss prevention, auditing and retention. If you plan to use Microsoft Copilot, the first step is checking who can open what. Some Purview controls come with Business plans and others need higher licensing or an add-on, so we check what your tenant includes before recommending anything.
Do we need technical staff to use AI?
No. Pilots plug into tools you already use, such as email, documents, spreadsheets and your website, and we train your team in plain English. If it needs a manual, we have built it wrong.
What does an AI pilot cost?
We scope a single workflow and quote it up front, and we measure the hours saved so the decision to expand, or stop, is based on your numbers and not our enthusiasm.
Will AI replace my staff?
Our pilots target tasks, not people. The research so far shows modest, uneven gains, and the judgment calls stay with your team.
Is Microsoft Copilot worth it for us?
It can be, where people spend real time drafting, summarizing and searching. It is a separate add-on, so we test it on one job first and check your file permissions before turning it on.
Service area
AI Solutions across our region
We deliver this service on-site and remotely throughout McHenry County, the NW suburbs, and SE Wisconsin.
Related services
Businesses often pair this with
Web Design, SEO and AIO
Fast, modern websites built to be found by Google and AI search alike: local SEO plus…
Print & Digital Marketing
Brochures, direct mail, branding, and campaigns that fill your pipeline, the same playbook we use to…
Exchange / Microsoft 365
Expert setup, migration, and day-to-day management of Exchange and Microsoft 365: email, Teams, SharePoint, security, and…
IT Strategy Consulting
An honest audit of your technology, security, and costs, translated into a plain-English roadmap you can…
Ready to make your technology an advantage?
Free consultation, honest answers, no obligation.