Find Out What AI Knows About Your Clients,
Before Someone Else Does

Your staff are already using AI tools.
The risk is not hacking,
it’s accidental disclosure through personal AI accounts.

Run My Free AI Exposure Check See How WAID Protects You
10-minute readiness scan No IT setup required Australian owned & privacy-first

DESIGNED FOR: SMALL OFFICES HANDLING SENSITIVE INFORMATION  |  CANCEL ANYTIME

The AI oversight gap.

Traditional security can't prevent copy-paste mistakes.

Most privacy incidents in small offices don't start with hackers. They start with everyday workflows:

  • A receptionist summarises an email chain in a public AI tool
  • A staff member uses a personal AI account on a work device
  • An AI extension reads everything on every website
  • Client or patient details appear in places they shouldn't

WAID helps you put basic oversight around AI use and create documentation that shows you took reasonable steps.

Visibility

Know what's in use. See which AI services and extensions are present across your office.

Control

Optional secure Wi-Fi and simple policy guardrails to keep data safe.

Evidence

Timestamped reports for governance, insurance, or client questionnaires.

Three steps. No IT team required.

Discover

Download and run WAID Snapshot on a nominated office computer. It checks AI exposure signals.

Shadow AI Discovery Report

Connect

If you have admin access, WAID can pull additional tenant-level signals (authorised apps).

Enhanced Evidence

Protect

Add WAID Gate to create Office_Secure Wi-Fi and receive monthly evidence packs.

Ongoing Monitoring

From discovery to deployment in under 48 hours. No technical expertise required.

Built for Australian SMBs handling sensitive data.

Industries with high compliance pressure and sensitive client information need more than just a "policy".

Allied Health & Dental

Patient records and treatment notes. High urgency for privacy compliance.

NDIS Providers

Client plans and extremely sensitive personal data. Strong compliance pressure.

Accounting & Payroll

Tax files, payroll details, and financial records. Must demonstrate "reasonable steps".

Childcare & Education

Student records and parental comms. Reputation-driven and highly sensitive.

Property Management

Constant flow of ID documents, tenancy applications, and contracts.

Legal & Insurance

Confidential briefs, claims data, and contracts. Require careful handling of info.

How WAID Protects Your Business

WAID Snapshot Dashboard

See What's Happening

Most business owners have no idea which AI tools their staff are using. Your team might be productive, but without visibility, you can't manage compliance risks.

Feature:

WAID Snapshot analyzes browser history, application logs, and network signals to identify every AI tool used across your devices in the last 30 days.

Benefit:

Complete visibility means you can make informed decisions about which tools are safe, which need policies, and which should be blocked.

Monthly Evidence Pack PDF

Audit-Ready Evidence

Under the 2026 Privacy Act, if there's a data incident, you need to prove you took "reasonable steps" to protect client information. Manual documentation is time-consuming and easy to miss.

Feature:

WAID Gate automatically generates monthly evidence packs showing which tools were monitored, what was blocked, and your overall control status.

Legal and insurance peace of mind. You'll have timestamped, hashed documentation proving your due diligence, ready for auditors, insurers, or legal proceedings.

WAID Device

Secure Productivity

You don't want to ban AI tools, they make your team more productive. But you need control over which tools are safe and ensure risky ones don't expose client data.

Feature:

WAID Gate is a managed privacy device that sits between your network and the internet. It intelligently filters AI traffic, blocking high-risk tools while allowing approved ones to function normally.

Your data never leaves your control. Staff stay productive with safe AI tools, while risky platforms are automatically blocked, no constant supervision needed.

Choose the level of protection that fits your office.

Quick Start

WAID Snapshot

"Show me our AI exposure."

$497 one-time
  • ✓ Shadow AI Exposure Report
  • ✓ DEV-01 Device Snapshot Register
  • ✓ Risk summary + action checklist
  • ✓ 30-day email support
  • One nominated device included.
Start Snapshot
Most Popular

WAID Gate

"Ongoing oversight without the effort."

$89 /month
+ $249 setup
  • ✓ Everything in WAID Snapshot
  • ✓ Managed Office_Secure Wi-Fi
  • ✓ Monthly Evidence Pack
  • ✓ Annual re-scan + evidence refresh
  • ✓ Priority email + chat support
What you're really paying for:
Monthly documentation and oversight, not the router.
Get WAID Gate
Premium

WAID Verified Controls

"Implement controls and show what we did."

$129 /month
+ $1,497 setup
  • ✓ Everything in WAID Gate
  • ✓ Custom AI Acceptable Use Policy
  • ✓ 30-minute staff training session
  • ✓ Controls implementation, we help implement these
  • ✓ WAID Verified Controls Attestation
Note: Attestation of implemented controls, not a legal certification.
Book a Call
✓ Visibility
✓ Device snapshot
✓ Tool register
✓ Ongoing monitoring
✓ Evidence pack
✓ Policy + training

What small offices typically discover in the first scan

  • Staff using public AI tools from shared office computers
  • AI extensions with broad permissions ("read and change all data on websites")
  • Personal accounts used for work tasks
  • Unapproved apps authorised to access Drive/Email (where tenant evidence is available)

Free AI Readiness Check

Answer a few questions and receive a simple readiness rating plus recommended next steps.

We'll email your results and a short checklist. Unsubscribe anytime.

WAID Questions & Answers

Shadow AI & Discovery +

Shadow AI refers to artificial intelligence tools (like ChatGPT, Claude, Gemini, or Copilot) that employees use without official approval or oversight. Common examples include using free AI chatbots to draft emails, summarize documents, or analyze data. For Australian businesses handling sensitive client information, unmanaged Shadow AI can create privacy compliance risks under the Privacy Act 2025 amendments.
WAID Snapshot scans nominated work devices to detect AI domain exposure (websites like chatgpt.com, claude.ai, gemini.google.com) and AI-related browser extensions. The scan takes 5-10 minutes and produces a Shadow AI Discovery Report showing which tools were accessed, when, and from which devices. Optional integration with Google Workspace or Microsoft 365 can reveal authorized third-party apps with AI capabilities.
Yes. WAID Snapshot identifies when employees visit chatgpt.com or use ChatGPT browser extensions on nominated office devices. WAID Gate monitors all devices connected to your Office_Secure Wi-Fi network. We capture metadata (domain visits, timestamps, connection duration) but never the actual prompts or conversations.
WAID monitors exposure to 200+ AI services including ChatGPT (OpenAI), Claude (Anthropic), Gemini (Google), Copilot (Microsoft), Perplexity, Jasper, Copy.ai, Midjourney, DALL-E, and industry-specific AI tools like dental AI scribes or real estate AI assistants. We also detect AI-enabled browser extensions and mobile apps connecting through your office Wi-Fi.

Privacy & Compliance +

Yes. Under the Privacy Act 1988 (as amended in 2025), Australian businesses must take "reasonable steps" to protect personal information. When employees use AI tools to process client data, patient records, or financial information, that data may be transmitted to overseas servers or used to train AI models. WAID helps businesses document their AI oversight controls to demonstrate compliance with Australian Privacy Principles (APPs), particularly APP 1 (open and transparent management) and APP 8 (cross-border disclosure).
If your Australian business handles data from EU residents, GDPR Article 28 requires you to ensure third-party processors (including AI services) provide adequate data protection. Many free AI tools don't meet GDPR standards. WAID helps you identify which AI tools your team is using, assess their data handling practices, and implement controls to ensure GDPR compliance for international clients.
Yes, if AI tools process personal information on behalf of your business. WAID's Verified Controls tier includes policy templates that address DPA requirements, helping you document which AI services are approved, what data they can process, and what contractual protections are in place.
The Privacy Act amendments taking full effect in December 2026 introduce mandatory reporting for data report and stricter requirements for automated decision-making transparency. WAID provides timestamped evidence that you've implemented "reasonable steps" to monitor and control AI tool usage, documentation that may be required in audits or breach investigations. Our monthly evidence packs create an audit trail showing ongoing oversight.

Industry-Specific Questions +

Australian dental practices can use AI tools for administrative tasks, but must ensure patient health information remains protected under HIPAA-equivalent Australian standards and Privacy Act requirements. Free AI tools that don't sign Business Associate Agreements (BAAs) or store data offshore pose compliance risks. WAID helps dental practices identify which AI tools staff are using with patient data and implement approved alternatives that meet Australian healthcare privacy standards.
Using free ChatGPT (or similar tools) to draft or review contracts containing client personal information, property details, or financial data creates privacy risks. Data entered into free AI tools may be stored on overseas servers or used to train AI models. Real estate agencies should implement WAID monitoring plus approved AI tools with proper data protection agreements to safely use AI for contract work.
Accounting firms in Australia handling client financial data must comply with Privacy Act requirements and professional standards from CPA Australia or CA ANZ. Using AI tools to analyze financial statements, prepare tax returns, or manage client communications requires documented controls. WAID helps accounting firms monitor AI usage, implement approved tools policies, and maintain evidence of compliance for professional indemnity insurers.
Australian law firms can use AI tools, but must maintain client confidentiality per Australian Solicitors' Conduct Rules. Using public AI services to analyze case files, draft legal documents, or research precedents may breach privilege if client information is transmitted without proper safeguards. WAID helps law firms monitor which AI tools staff are using with client data and implement compliant alternatives.

Pricing & ROI +

WAID pricing starts at $497 one-time for a Shadow AI Snapshot (discovery scan), $89/month for WAID Gate (ongoing monitoring with hardware), or $129/month for WAID Verified Controls (full implementation with attestation). This is typically 60-80% less than hiring a compliance consultant for manual AI auditing, and provides automated monthly documentation.
Australian SMBs using WAID typically see ROI through: (1) reduced professional indemnity insurance premiums (10-15% with documented controls), (2) avoided privacy breach fines (up to $50 million under 2026 Privacy Act), (3) time savings vs manual monitoring (15-20 hours/month), and (4) client retention (businesses can prove data protection to clients). Average payback period is 2-3 months for WAID Gate.
Yes. A part-time compliance officer costs $40,000-60,000 annually in Australia. WAID Gate provides automated AI monitoring and monthly compliance documentation for $1,068/year ($89/month), delivering similar oversight at 95% lower cost. For comprehensive controls, WAID Verified Controls at $1,548/year still costs 95%+ less than dedicated compliance staff.
WAID operates independently but can complement existing security tools. While traditional endpoint protection (antivirus, EDR) monitors for malware, WAID specifically tracks AI tool usage metadata. We provide exportable reports that can be integrated with SIEM systems, compliance dashboards, or shared with IT security vendors. WAID does not replace security tools, it fills the AI oversight gap they don't address.

Implementation & Setup +

WAID Snapshot takes 5-10 minutes to download, run, and generate your first report. WAID Gate hardware ships within 48 hours and requires about 15 minutes to plug in and connect to your office network (no technical expertise needed). WAID Verified Controls includes a 30-minute staff training session and typically completes policy implementation within 2 weeks.
No. WAID Snapshot is a simple application download (like installing any business software). WAID Gate is plug-and-play hardware, similar to connecting a Wi-Fi router. We provide remote configuration assistance if needed. Most small businesses complete setup without external IT support.
WAID Gate monitors devices connected to your Office_Secure Wi-Fi network, which works for office-based staff. For remote workers, WAID Snapshot can be run on their company-issued devices to assess AI exposure. Comprehensive remote monitoring requires VPN integration or MDM (Mobile Device Management) policies, we help implement these as part of WAID Verified Controls.
Yes. WAID Snapshot supports Windows 10/11, macOS 11+, and Linux Ubuntu 20.04+. WAID Gate monitors network-level traffic, so it works regardless of device operating system, any device connecting to your Office_Secure Wi-Fi is monitored.
We recommend quarterly scans minimum for low-risk businesses, monthly for businesses handling sensitive data (healthcare, legal, financial), and continuous monitoring via WAID Gate for businesses with strict compliance requirements. WAID Gate includes an annual re-scan plus monthly evidence packs to document ongoing oversight.

Comparison & Alternatives +

Data Loss Prevention (DLP) tools monitor file transfers and email attachments to prevent data exfiltration. WAID specially monitors AI tool usage metadata, which services are accessed, when, and from where. DLP and WAID are complementary: DLP stops files from leaving your network, while WAID identifies when staff are copying data into AI chatbots (which DLP can't detect since it's manual copy-paste behavior).
Vanta and Drata are compliance automation platforms focused on SOC 2, ISO 27001, and similar frameworks. WAID is a specialized Shadow AI monitoring tool that can feed evidence into Vanta/Drata as part of broader compliance programs. If you're already using Vanta or Drata, WAID fills the AI oversight gap they don't specifically address.
Google Workspace admin console shows some third-party app authorizations but doesn't provide comprehensive AI usage visibility. It won't detect: (1) employees using personal AI accounts on work devices, (2) browser-based AI tools accessed without app authorization, (3) AI extensions with broad permissions, or (4) detailed usage patterns. WAID provides AI-specific monitoring that Google Workspace admin tools aren't designed to capture.
Penetration testing assesses your network security vulnerabilities (can someone hack in?). WAID assesses your AI governance (is data walking out via staff using AI tools?). These address different risks. Most Australian SMBs need both: pen testing for security posture and WAID for AI compliance. WAID costs 80-90% less than annual pen testing and provides continuous monitoring vs one-time assessment.

Technical & Edge Cases +

If employees use a VPN to bypass your office network, WAID Gate won't monitor that traffic (since it's encrypted and routed outside your network). WAID Snapshot can still detect AI domains in browser history and installed extensions on scanned devices. For comprehensive VPN usage control, we recommend pairing WAID with network policies that restrict VPN use on company devices, part of our Verified Controls implementation.
WAID Gate monitors network connections from mobile devices on your Office_Secure Wi-Fi, including AI app usage (ChatGPT mobile app, Microsoft Copilot app, etc.). We capture domain-level data (which AI service was accessed) but not app-specific activity. Mobile devices using cellular data or personal hotspots aren't visible to office Wi-Fi monitoring.
WAID monitors devices on your office network. Employees could bypass monitoring by: (1) using personal devices on mobile hotspots, (2) using home Wi-Fi outside business hours, or (3) using VPN to route around office network. These are policy issues, not technical ones. WAID Verified Controls includes acceptable use policies and staff training to address these scenarios. For high-security environments, we recommend pairing WAID with MDM (Mobile Device Management) solutions.
No. WAID is metadata-only. We collect: AI domain visits, timestamps, connection duration, extension names, and device identifiers (hashed). We do NOT collect: prompts, AI responses, document contents, emails, passwords, or keystrokes. All evidence packs are encrypted and stored on Australian servers. You can request data export or deletion at any time.
Yes. WAID's data collection practices align with GDPR requirements: (1) we collect only necessary metadata, (2) data is encrypted in transit and at rest, (3) we provide data export and deletion on request, (4) we maintain Australian data residency (adequate GDPR jurisdiction), and (5) we don't transfer data outside approved jurisdictions. WAID can be part of your GDPR compliance program.

Features & Capabilities +

Your Shadow AI Exposure Report includes: (1) List of all AI domains accessed in the last 30 days with timestamps, (2) AI-related browser extensions with permission levels, (3) Device inventory map (DEV-01) showing which devices showed AI activity, (4) Risk assessment scoring each discovered tool, (5) Recommended action plan with controls to implement, and (6) 30-day email support for questions about the report.
WAID Gate is a managed GL.iNet router that creates a secure Office_Secure Wi-Fi network. All devices connecting through this network have their domain-level traffic logged (which websites/services they access). The gateway recognizes 200+ AI services and flags connections to them. Monthly evidence packs show: total devices monitored, AI service exposure, blocked attempts (if blocking rules are enabled), and compliance status. All monitoring is passive, no software installation on employee devices required.
Yes, optionally. WAID Gate can be configured to: (1) Monitor only (capture exposure data without blocking), (2) Block high-risk AI tools while allowing approved services, or (3) Block all AI tools except explicitly whitelisted services. Most clients start with monitoring mode to understand usage patterns, then implement selective blocking as part of WAID Verified Controls.
Yes. WAID Gate generates automated monthly evidence packs showing: devices monitored, AI services detected, connection attempts (successful/blocked), control implementation status, anomalies or alerts, and a cryptographic hash for tamper-evidence. These reports can be shared with auditors, insurance providers, or clients requesting proof of data protection controls.
WAID Gate provides daily summary emails showing AI activity. Real-time alerts (within 5 minutes of detection) are available as an add-on for high-security environments. Standard monitoring includes next-business-day alerts for high-risk events like: new AI tools detected, personal account usage on work devices, or after-hours AI access from office network.

Refund, Cancellation & Support +

WAID Snapshot includes a 14-day money-back guarantee if the scan finds no AI exposure (uncommon, but we honor it). WAID Gate setup fee is refundable if the hardware arrives defective (DOA). Monthly subscriptions can be cancelled anytime with 30 days' notice. WAID Verified Controls consultation fees are non-refundable after work begins (policy drafting, training sessions).
WAID Snapshot includes 30-day email support (48-hour response time). WAID Gate includes priority email and chat support (24-hour response, business hours). WAID Verified Controls includes priority phone support during Australian business hours (8am-6pm AEST/AEDT). All tiers include access to our knowledge base, setup guides, and monthly product webinars.
Email hello@waid.ai with 30 days' notice. We'll send prepaid return shipping for the gateway hardware. You'll receive a final evidence pack covering your entire service period. There are no long-term contracts or cancellation fees.

Future-Proofing & Updates +

Yes. Our threat intelligence team continuously updates WAID's AI service database. When new AI tools emerge (new chatbots, AI coding assistants, image generators), they're added to our detection library within 2-4 weeks. WAID Gate updates automatically, no manual updates required.
Our compliance team monitors Australian Privacy Act updates, GDPR amendments, and industry-specific regulations. When requirements change, we update our policy templates, evidence pack formats, and reporting capabilities. All WAID customers receive compliance update notifications and access to revised templates as part of their subscription.

Get visibility now. Add protection when you're ready.

Quick Check

WAID Snapshot

$497 one-time
Start Snapshot

Monthly Protection

WAID Gate

$89/mo
$249 setup
Get WAID Gate

Full Implementation

Verified Controls

$129/mo
$1,497 setup
Book a Call

Secure checkout  |  Setup fee refund if router DOA  |  Email support within 24 hours  |  🇦🇺 100% Australian-owned