I read the rules so you do not have to.
Business analyst. Twelve years inside regulated NSW public sector operations. Founder of Limitless Digital Co, Wollongong. I assess AI use before I trust it, and run my own business on AI systems I built and govern.
Twelve years inside operations where the rules mattered. Then AI arrived.
For twelve years I worked inside some of the most complex operations in the NSW public sector, the last five as a Business Analyst: health districts, supply chains, continuous improvement programs. Regulated environments, where a process that touched hundreds of people had to be mapped, defended and audited.
Then AI arrived in small to medium businesses the way it arrives everywhere: through the side door, on someone's phone, with no one writing down where it was allowed to go. I watched owners turning over millions run their client information through free tools because nobody had told them the rule. Not because they were careless. Because the rule was written for someone else.
That is the gap this site closes. I read the frameworks, the Act and the guidance, and I write down what applies to a business your size.
I also teach AI micro-credentials for the Institute of Applied Technology Digital, where I run classes for working adults on using AI well.
Four things, working together.
I assess AI use before I trust it.
Every AI system in my own business went through a written assessment, modelled on the NSW AI Assessment Framework, before it was allowed near client information. The habit of asking "what does this system actually do with the information, and who checks it" is the habit behind every page here.
I run my own governed AI systems.
Limitless Digital Co runs on AI agents I built and govern: a register, risk tiers, rules for what they may and may not do, and a human approving the output. Very few people writing about AI governance have built any. It changes what you notice.
I have stopped a breach before it happened.
A client automation would have moved health information offshore without anyone realising. It was redesigned to carry a name and an email and nothing else, and a privacy policy went in. That is the kind of catch these pages are written to make possible for you.
I have said "don't build it".
An audit I ran ended with the recommendation not to spend, because the numbers did not justify it. The client kept the plan. The same rule runs this site: if a rule does not apply to you, the page says so.
Owners are free to lead, not chase.
Most small to medium businesses are held together by the owner. AI is the first real chance to change that, and it only works if the ground underneath is solid: the information sorted, the rules written, the checker named. My job is to make that ground plain enough that you can build on it yourself.