business cover · ai incident response
An employee just did something with AI.
What happens now?
You call one number. Within the hour there's a forensics engineer and a lawyer on the line with you, and we start paying for the clean-up.
how it usually starts
Nobody meant for this to happen.
Pasted customer data into a public chatbot
the most common one, by a lot
Connected an AI tool to the CRM without review
quiet until it syncs something out
Trained on data the contract didn't allow
surfaces months later, in an audit
Shipped an agent with write access
small mistake, wide blast radius
the response
Six moves, in order.
00:00
You call the line
you + duty leadOne number, answered by a person. You describe what happened in your own words. No incident form, no severity dropdown.
00:60
Forensics joins
forensicsAn engineer starts pulling logs: which tool, which account, what left the building, and whether it's still leaving.
03:00
Counsel scopes the exposure
counselA lawyer tells you what you're legally required to do and by when, in which countries. Privilege attaches from here.
24:00
Notification handled
our teamIf people need telling, we write it, you approve it, we send it. Regulators get filed to on time, in the right format.
day 4
Recovery and rebuild
engineeringCredentials rotated, models retrained or rolled back, tooling locked down. We pay for the downtime while it happens.
day 30
The written debrief
case leadWhat happened, what it cost, and the three changes that stop the repeat. Short. Readable by your board.
what's paid
Coverage, in plain words.
- Forensics and investigation costs, in full
- Legal counsel from hour one, no deductible on the first $25,000
- Notifying customers, staff and regulators, written and sent for you
- Lost income while systems are down, paid weekly
- Rebuilding models, rotating credentials, replacing tooling
- Two years of watching afterwards, for the second attempt
incident desk · response clock
live- 0:00A human answers, any hour, any dayanswered
- 0:12Systems, records and scope loggedlogged
- 0:41Named responder working your caseworking
60 min
from your call to a named responder
median 41 min in 2025 · 98.6% answered inside the hour
If we miss it, your next quarter is free, written into the policy, not a marketing line.