AI is the easy part. Deploying it safely isn't.
Most AI tools are built by people who have never dealt with a data breach or a compliance review. If your business handles patient records, money, or client files, that is the part that should worry you.
Your team is already using AI, unsupervised
Your staff are pasting company and client information into free AI chat tools. It does save them time. It also means that information has left your business.
AI pilots that never reach production
A demo looks great, then stalls, because nobody can say where the information goes, who can see it, or what happens when the tool gets something wrong.
A supplier who can't answer security questions
Before you can sign, someone asks how the tool protects data. Most AI firms have never had to answer that.
Nobody responsible for saying whether a tool is safe
You have someone who fixes computers, but nobody responsible for judging whether a new tool is safe to bring in.
Two ways we help
Build something with AI, or get your security in order. Every one is a fixed price agreed in writing before any work begins. No hourly meter, no open-ended discovery.
AI Automation
Build something that takes routine work off your team. More on our AI services.
AI Front Desk
For clinics, wellness studios, and any appointment-based practice
From $2,400Fixed price
- Online intake forms that feed straight into your system
- Automated appointment reminders by text or email, which cut no-shows
- An assistant that answers questions about your services, pricing, and policies
- Your client information is never used to train AI models, in writing
Ready in about 2 weeks. Written instructions and 30 days of support included.
See what is includedClient Intake Pro
For law firms and professional services
From $4,800Fixed price
- Digital new-client intake built around how your practice works
- Automatic conflict checks
- First-pass reading and summarizing of documents
- Privacy limits, and a clear record of everything the AI touched
Ready in about 3 to 4 weeks. Written instructions and 30 days of support included.
See what is includedTeam Brain
For growing teams of 10 to 200 people
From $3,600Fixed price
- An assistant that answers staff questions from your handbook and files
- Access rules, so people only see what they are allowed to see
- Stops repeated quick questions from eating your day
Ready in about 3 weeks. Written instructions and 30 days of support included.
See what is includedCustom AI Build
For businesses with a specific job to automate
From $7,500Fixed price
- Automation or an integration designed around your own process
- Fixed price agreed in writing before work starts, with no hourly meter
- Security review included: we map where your information goes and lock it down before anything goes live
Timeline set with the written proposal.
See what is includedSecurity Services
Cybersecurity work sold on its own, and the reason the AI work holds up. Advisory and assessment, not a monitoring service. More on our cybersecurity work.
Security Health Check
For small businesses that handle sensitive client information and have never had a proper review
From $1,800Fixed price
- A review of your systems, where your information flows, and who has access to what
- Written findings with a prioritized fix list, in plain English
- A walkthrough call so you understand what the findings mean
About 1 to 2 weeks.
See what is includedCompliance Readiness
For clinics and SaaS firms facing HIPAA or SOC 2 requirements
From $4,500Fixed price
- An assessment of where you stand against the standard you need to meet
- A plan for closing the gaps, plus policy templates
- Preparation for a formal audit, without the audit-firm price tag
HIPAA and SOC 2. We do not cover CMMC or PCI-DSS.
See what is includedvCISO: Virtual Chief Information Security Officer
For companies of 20 to 200 that need senior security leadership but not a full-time hire
From $2,500per month
- Ongoing security guidance: risk reviews, vendor assessments, security planning
- A named expert your leadership and your clients' security questionnaires can point to
- Advisory only. No on-call firefighting, and you can cancel any time
Month to month.
See what is includedvCTO: Virtual Chief Technology Officer
For small businesses making technology decisions without a technical leader
From $2,500per month
- Technology strategy: systems, software, and vendor selection without the sales pitches
- An IT plan and AI adoption planning that ties into the automation packages above
- Someone in the room who speaks both tech and business when big decisions come up
- Advisory only, and you can cancel any time
Month to month.
See what is includedTeam Security Training
For the same clinics, firms, and teams buying the other packages
From $900per session
- Practical workshops on phishing, passwords, and handling client information safely
- Includes how to use AI tools without putting client information into them
- In person in the Triangle, or remote
Pairs naturally with any AI automation package.
See what is includedAI Strategy & Adoption
For teams already using AI tools who want to know what they have agreed to
From $1,500Fixed price
- Which AI tools are already in use, and what information they can reach
- What your software suppliers do with your information
- Simple written rules for approving new tools, and staff training
A short piece of work that ends with clear documents.
See what is includedWhere we differ from a generic AI shop
Plenty of firms can build you an AI tool. The question is what happens once it can see your customers' information.
| Typical AI automation shop | Barsho Systems |
|---|---|
| Works out the data questions after the demo | Settles them before anything is built |
| Can't answer your clients' security questions | HIPAA and SOC 2 work is our day job |
| Your information helps train someone else's AI | Yours stays yours, and we put that in writing |
| Charges by the hour with no clear end | Fixed price agreed before work starts |
| Hands over a rough version and disappears | Written instructions, and we stay on if you want |
How it works
Four steps, and you can stop after any of them.
A 20 minute fit call
We work out whether AI genuinely helps your business. If it does not, we say so.
A fixed-price proposal
What you are getting and what it costs, in writing, before any work starts.
We build it
Questions about where your information goes are settled before anything goes live, not after the demo.
Handover
Written instructions in plain English, 30 days of support, and the Care Plan if you want it.
What we guarantee about your information
This is the part most AI shops cannot answer. It applies to every package.
- Client and patient records
- Email, documents, shared drives
- Your booking or case system
- What the tool can see
- Where that goes
- Who else can reach it
- What happens when it is wrong
- Sees only what the job needs
- Never trains on your information
- Named in your contract
Most AI projects answer the middle column after the demo. That is the part we do first, and it is why the answers below hold.
Never used to train AI models
Your information is not used to train anyone else's AI. That is written into the contract, not just promised on a call.
Set up for HIPAA and SOC 2
If you are a regulated practice, the setup accounts for that from the start, rather than being retrofitted later.
You get the answers in writing
Those four answers go in your written proposal before any work starts. Where a tool cannot give us one of them, we do not use that tool for your information.
Built by a security engineer
The person building your automation is the same person who does the security work, so the answers come from one place.
Currently piloting with a local wellness studio
We are working with a Pilates studio here in Chapel Hill on the first AI Front Desk build. It covers online intake for new clients and automated class reminders, with an assistant that answers routine questions about schedules and pricing.
Full case study coming soon.
Questions people ask
No. It is excluded in the contract, not just as a setting we tick. Where a tool cannot guarantee that, we do not use it for your data.
You get a written proposal setting out exactly what is being built and what it costs. That number does not change because the work took longer than expected. There is no hourly billing.
Two to four weeks for most packages. AI Front Desk is usually about two weeks, Client Intake Pro three to four.
No. Handover includes written instructions in plain English, and we walk you through it. If something needs a technical decision, we explain the options rather than asking you to pick blind.
Nothing stops working. You can carry on unaided, or take the Care Plan at $290 a month for upkeep, updates, and priority support. It is optional and you can cancel any time.
Yes. We are based in Chapel Hill and meet Triangle clients in person, and we work remotely with businesses elsewhere.
No, and we would rather say so plainly. This is advisory and assessment work: reviews, compliance preparation, and part-time security leadership. There is no round-the-clock monitoring and nobody on call at 3am. If that is what you need, you need a different kind of provider, and we will tell you.
Usually yes, because they are different jobs. IT support keeps things running and fixes what breaks. A security review asks whether your information is actually protected: who can reach it, what happens if someone gets in, and whether you could prove any of it to a client. Good IT support is not the same as someone checking that work.
Who we build for
Book a free 20 minute fit call
Twenty minutes. We will work out whether AI genuinely helps your business, and what you would need to be careful with. If there is nothing worth doing yet, we will tell you.
Chapel Hill, NC (Serving the Triangle)