I read the rules so you do not have to.
Business analyst. Twelve years inside regulated NSW public sector operations. Founder of Limitless Digital Co, Wollongong. I assess AI use for a living and run my own business on AI systems I built and govern.
Twelve years inside operations where the rules mattered. Then AI arrived.
For over a decade I worked as a Business Analyst inside some of the most complex operations in the NSW public sector: health districts, supply chains, continuous improvement programs. Regulated environments, where a process that touched hundreds of people had to be mapped, defended and audited.
Then AI arrived in small to medium businesses the way it arrives everywhere: through the side door, on someone's phone, with no one writing down where it was allowed to go. I watched owners turning over millions run their client information through free tools because nobody had told them the rule. Not because they were careless. Because the rule was written for someone else.
That is the gap this site closes. I read the frameworks, the Act and the guidance, and I write down what applies to a business your size.
I also teach AI micro-credentials for the Institute of Applied Technology Digital, where I run classes for working adults on using AI well.
Four things, working together.
I assess AI use for a living.
Part of my working week is assessing real AI use cases under a government AI assessment framework, and having those assessments endorsed. The habit of asking "what does this system actually do with the information, and who checks it" is the habit behind every page here.
I run my own governed AI systems.
Limitless Digital Co runs on AI agents I built and govern: a register, risk tiers, rules for what they may and may not do, and a human approving the output. Very few people writing about AI governance have built any. It changes what you notice.
I have stopped a breach before it happened.
A client automation would have moved health information offshore without anyone realising. It was redesigned to carry a name and an email and nothing else, and a privacy policy went in. That is the kind of catch these pages are written to make possible for you.
I have said "don't build it".
An audit I ran ended with the recommendation not to spend, because the numbers did not justify it. The client kept the plan. The same rule runs this site: if a rule does not apply to you, the page says so.
Owners are free to lead, not chase.
Most small to medium businesses are held together by the owner. AI is the first real chance to change that, and it only works if the ground underneath is solid: the information sorted, the rules written, the checker named. My job is to make that ground plain enough that you can build on it yourself.