275 million users exposed across 8,800+ institutions. Our team has decades of experience helping organizations respond to and recover from major security incidents.
AI Governance & Security
We help organizations deploy AI that is secure, compliant, and built to last.
Signal & Soil is a Canadian consultancy specializing in AI governance, cybersecurity compliance, and enterprise risk management.
Paris 2024 Olympics Security · Startups to Fortune 500 · Three Decades of Security Leadership
The Problem
Most AI deployments are ungoverned, insecure, and unaccountable.
Organizations are racing to deploy AI without the governance frameworks, security posture, or compliance readiness to do it responsibly. The cost of getting it wrong is rising fast.
$4.2M
Average cost of an AI-related data breach
87%
Of organizations lack AI governance frameworks
3x
Increase in AI regulatory actions since 2023
Track Record
Three decades in the field. We've seen every cycle.
Building ISPs before the web mattered. Securing the iPhone launch. E-voting systems. Now applying AI to security.
Our team has worked on projects including:
- AI governance and security programs for global platforms serving 100M+ users
- Designing and implementing security for the iPhone launch at AT&T
- Microsoft Trustworthy Computing (TwC) — enterprise and customer-facing security
- Open source security assessment at Microsoft
- Cybersecurity for the Paris 2024 Olympics & Paralympics
- Infrastructure security across AWS, GCP, and Azure
- Security architecture, risk assessments, and vulnerability management
- E-voting and anonymization systems security
- Internet backbone and critical infrastructure security
- ...and many more
Frameworks
What We Do
Three disciplines. One mission.
We bridge the gap between governance, risk, and security — ensuring your organization is compliant, resilient, and protected.
AI Governance & Risk
Implement robust governance frameworks, achieve compliance, and manage AI risk across your organization. ISO 42001, OWASP LLM Top 10, and Google SAIF aligned.
Enterprise Risk & Resilience
Enterprise risk governance, quantitative risk analysis, operational security, and business continuity. ISO 31000, FAIR, and NIST CSF 2.0 aligned.
AI Security
Security assessments for AI systems, LLM vulnerability analysis, prompt injection defense, and security architecture review. OWASP LLM Top 10 and Agentic AI aligned.
How We Work
End-to-end AI governance.
From boardroom strategy to security operations. We operate across every layer of the AI governance stack.
Strategy
AI roadmaps, governance frameworks, risk assessments, compliance strategy
Program Delivery
Program management, vendor evaluation, implementation planning, change management
Security Operations
Security architecture, vulnerability assessments, compliance audits, incident response
Infrastructure & Certifications
AWS
Amazon Web Services
GCP
Google Cloud Platform
Azure
Microsoft Azure
Industries
Built for high-stakes environments.
We specialize in sectors where AI failure isn't an option.
Government & Public Safety
EMS dispatch, infrastructure monitoring, citizen services
Financial Services
Risk modeling, compliance automation, fraud detection
Healthcare
Clinical decision support, patient data governance, HIPAA alignment
Energy & Utilities
Grid optimization, predictive maintenance, regulatory compliance
Tech & SaaS
AI security assessments, platform security, model governance
Professional Services
AI strategy, knowledge management, operational efficiency
Insights
Latest thinking.
Perspectives on AI governance, security, and engineering from the field.
Canvas LMS Breach: What Educational Institutions Should Do Now
The May 2026 Canvas breach exposed 275 million users across 8,800+ institutions. Here's what happened, immediate steps to take, and how to build long-term resilience.
Why Your AI Needs Governance Before It Needs Features
Most organizations rush to deploy AI capabilities without governance frameworks. Here's why that's a costly mistake and how ISO 42001 provides a structured path forward.
OWASP Top 10 for LLM Applications: A Practical Security Guide
A hands-on guide to the OWASP Top 10 risks for LLM applications, with real-world examples and mitigation strategies for each vulnerability category.
Ready to govern your AI?
Book a free discovery call. We'll assess your AI maturity, identify governance gaps, and outline a path to compliant, secure AI deployment.