Circle Square Consulting
Signet

Signet  ·  A division of Circle Square Consulting

AI that holds up.

We build and run AI agents inside your business — every one of them reviewed, logged, and owned by a named human. So when a client, an auditor, or your own board asks who decided what, and on what basis — the answer is already written down.

See what you can put to work
Set it up

We build your Claude setup — connected, loaded with your knowledge, and used.

Write the rules

Security and AI policies, signed, and a platform to keep them current.

Automate or build

Agents for a workflow. Custom software when it needs to be software.

Then embed

A named engineer inside your business. That's where this goes.

The gap

Everybody has tried AI. Almost nobody has it doing real work.


Your team already uses AI. They opened a chat window, pasted something in, and got something useful back. That part is finished — the awareness gap closed a year ago.

What almost no business has is an agent doing a job. Something that reads the inbox every morning, drafts the response, files it in the right system, and knows when to stop and ask a person. 74% of leaders say AI has improved productivity — yet no single function has moved past pilot for more than about a quarter of them.

The distance between those two numbers is not enthusiasm. It is the last mile: connecting to the systems you actually run, working with data that is actually messy, and having someone accountable when it gets something wrong at 2am.

"Couldn't we just have AI do it?"

You could — and that is the trap. An agent that nobody reviews, nobody logs, and nobody signs for is a liability dressed up as a solution. The moment a client, an insurer, an auditor, or opposing counsel asks "who decided this, and on what basis?" — the gap becomes the story.

Nobody signs their name to a chatbot's output. We sign ours.

49%of business leaders name data security and compliance as their top barrier to adopting AI
27%the highest share scaling any single AI use case past pilot — data analytics. Every other function is lower

The method

The Harness


One process runs underneath everything we sell. We built it delivering attested policy and governance programs where being wrong had consequences, and it is the reason our output holds up when someone pushes on it. AI does the typing. A named human makes the judgment calls. The harness is everything that keeps that sentence true.

1

Context pack

We encode how your business actually works — your systems, your rules, your obligations, your house style. This is the asset. It is yours, it is written down, and it compounds.

2

The agent drafts

AI does the volume work: reading, classifying, routing, drafting, reconciling, summarizing. The part that is repetitive, rule-bound, and eats your team's week.

3

A person reviews

Every output that carries consequence passes a named human, against a written checklist — not a spot check, and not a vibe. Low-stakes work runs unattended; we tell you which is which.

4

We sign

Attestation, logging, and a defined escalation path. You can always answer who decided what, on what basis, and where the record lives.

5

Two strikes and it's law

Anything a reviewer corrects twice gets promoted into the context pack permanently. The agent gets more accurate every month — and cheaper to run.

6

You keep the asset

The context pack, the policies, the governance record. If you ever bring this in-house, you are not starting over. That is the point.

Why Circle Square

We already run the environments we are automating.


Grounded in your reality

We manage technology environments for a living — the credentials, the security stack, the ticket history. Your agents describe what your business actually does, not what a template imagines it does.

We run it on ourselves first

Every agent we sell, we operate internally before we offer it. Our own ticket queue is triaged by one. Our own operating brief is written by one. We are the first reference.

Compliance is home field

We deliver attested security policy programs mapped to NIST CSF 2.0 and CIS Controls v8. Governance is not bolted on afterward — it is the delivery method, whatever we are building.

We ship real software

Beyond services, we design, build, and operate commercial products of our own. When a workflow needs an application rather than an agent, that is not a subcontract for us.

Who we build for

Three industries, three front doors. Each one free.


The method is the same everywhere. The evidence, the vocabulary, and the first thirty minutes are built separately for the three industries we know best.

Law firms · 15–75 attorneys

The malpractice renewal now asks about AI.

The renewal checklist, the readiness assessment, and the Renewal Dry Run — thirty minutes on your last liability application. You keep the findings.

Everything for law firms →

Registered advisers · $250M–$5B AUM

You have the AI policy. Three parties ask for the file.

The pre-exam checklist, the evidence assessment, and the Evidence File — thirty minutes on the artifacts an examiner, a carrier and an acquirer each want.

Everything for advisers →

Specialty manufacturers · $10M–$150M

Your best estimator is your bottleneck.

The Quote Clock checklist, the assessment, and thirty minutes on your own RFQ numbers. We say honestly whether an agent helps.

Everything for manufacturers →

Free tool

Need an AI use policy this week? Start here.


Every carrier, examiner and enterprise customer has started asking the same question: what is your policy on AI? Most firms do not have one. This builds you a first draft in about ten minutes — specific to the tools you actually use, not a template with your name pasted on top.

AI Use Policy Starter · ten minutes · no cost

A real first draft, not a blank template.

Answer five short sets of questions about the tools your people use, the data you handle, and the uses you want off the table. You get a draft you can circulate the same day, plus an honest read on where a generic policy stops being enough for your obligations.

Build my AI use policy →

Offerings

Six things. That's the whole list.


Every one stands alone and is priced alone. Nothing obligates the next thing. They connect because each engagement makes the next one cheaper — your context pack carries forward — not because we bundle them.

Two ways we bill, and only two

Fixed fee for work with a known shape — setup, policies, agent builds. You know the number before we start.

A monthly block for custom applications and longer engagements. $6,000 a month buys 30 hours. We agree at the start of each month what we're working towards; when we hit it, we tell you and keep going. It's more affordable, more predictable, and it lets us change direction as you watch the thing run in production — instead of arguing with a statement of work written before anyone knew what it would need.

01 · Build the environment

Claude Setup

We come in and build your Claude setup — connected to your real systems, loaded with your real knowledge, and actually used by your team.

$2,900 – $12,900Four modules · take what you need
WhatIncludedFee
DeployTenant, seats, admin controls, SSO, data-handling settings, admin runbook$2,900
ConnectClaude wired into email, files, CRM, PSA, accounting — scoped and permission-bounded$3,900
BuildProjects, named skills, house style, and your context pack$4,900
EnableWorking sessions by role, a champion per team, usage instrumented, 30-day check-in$3,900
All four · 5–6 weeks$12,900
Start here if: your team has access to AI and it hasn't changed how anyone works. Most clients start here.
You keep the context pack
02 · Write the rules

Policies

Security and AI policies written around how your business actually operates — and signed by a named person who stands behind them.

$4,900 – $8,900Fixed fee · signed attestation on every policy
WhatIncludedFee
AI PoliciesAcceptable use, tool and model inventory, vendor risk, human-review procedures, employee briefing$4,900
Security PoliciesThe four clients and carriers ask for first, plus a NIST CSF 2.0 / CIS v8 crosswalk$4,900
Full ProgramThe complete ten-policy framework. Sold as Compliance Ready for firms starting from nothing$8,900
Start here if: a questionnaire is in someone's inbox, your renewal is close, or your people are using AI tools you never approved.
Line-by-line vCISO review · signed attestation
03 · Publish and maintain

GRC Platform

Somewhere for your policies to actually live — current, shareable, and ready when someone asks.

$495/moYour live governance portal · month to month
WhatIncludedFee
The portalPolicies, evidence and assessments in one place your clients and carrier can trustincluded
Annual reviewFull review and refreshed attestation, timed to your insurance renewalincluded
Staying currentRegulatory-change monitoring and questionnaire support, all yearincluded
Start here if: you have policies and they're a PDF in a folder nobody has opened since the day they were signed.
Refreshed attestation every year
04 · Automate a workflow

Agent Builds

One agent does one job, unattended, inside a system you already use.

$4,900 → $14,900Blueprint, then Build · $9,900 per agent after the first
WhatIncludedFee
BlueprintThe spec: what it does, what it never does, where it escalates — plus a fixed quote and a real off-ramp$4,900
BuildIntegrated with your system of record, piloted on live work, launched, tuned 30 days$10,000
Care optionalMonitoring and tuning after launch, with a named engineer$750/agent/mo
Blueprint + Build · one agent end to end$14,900
Start here if: you can name the process that's bleeding hours and you want it fixed this quarter.
Every agent ships with a governance record
05 · Build the software

Custom Applications

When the answer isn't an agent — it's software you don't have yet. Often with agents inside it.

$6,000/moA 30-hour block each month at $200/hr
WhatIncludedFee
How a month worksWe agree what we're working towards, we hit it, we tell you, we keep going. No rigid SOW to fight with when reality changes.$6,000
Month 1Requirements, architecture, working prototype. Either party can stop here.$6,000
Month 2Environments, identity, schema, integration access. Scope freezes at the end.$6,000
Months 3–6Build, demoed monthly. User testing, pilot, cutover, 30 days hypercare inside the last month$6,000/mo
Typical engagement · live at the end of it$36,000
Start here if: you've described what you need and realised no product does it.
You own the code from the first commit
06 · Put one inside the business

Embedded Engineer

An AI engineer inside your business — in your standups, your chat, and your backlog.

from $5,900/moA named engineer · 90-day minimum
WhatIncludedFee
One day a week~30 productive hours. A named engineer, not a rotating bench$5,900/mo
Two days a week~60 hours. Enough continuity to own a system end to end$11,400/mo
Four days a week~120 hours. The version that replaces a hire you were considering$21,900/mo
Start here if: you have more ideas than budget for one-off projects and you'd rather have capacity than a series of SOWs.
One named engineer, accountable to you

The five agent templates

Frontdesk inbound triage · Scribe document production · Books finance back office · Recruit hiring and onboarding operations · Brief your operating rhythm. You choose one and we adapt it to your systems, or we build custom. Recruit deliberately does not screen, score or rank candidates.

What you are buying

One agent does one job. Here is what that means.


An agent is not a chat window somebody has to remember to open. It is a process that runs on its own inside a system you already use, and hands work to a person only when it should. Six parts, every time.

1

A trigger

Something happens in your stack. An email lands, a ticket opens, an invoice ages past thirty days, a form gets submitted. No one has to start it.

2

Your context pack

The written rules for this workflow — your categories, your thresholds, your tone, your obligations. This is what makes it yours instead of generic, and it is the asset you keep.

3

It reads and drafts

Classifies, extracts, matches against your history, and writes the response or the record. The repetitive judgment-light work that currently eats somebody's morning.

4

It writes back into your system

A note on the ticket, a draft in the mailbox, a row in the ledger, a status change. This is the part most stalled AI pilots skip — and the reason they stall.

5

An escalation path

A written list of what it must never decide alone. Those are drafted and handed to a named person with the reasoning attached. Never sent.

6

A log and a review queue

Every action recorded. Review rate and override rate tracked. When a client or a carrier asks how it is governed, you have the answer in a report.

A worked example — Frontdesk at a 40-person law firm

  • Email to the general inbox and transcribed voicemail arrive around the clock
  • It decides which of five things this is: new matter inquiry, existing client, vendor, spam, or conflict-check needed
  • New inquiries get an intake response drafted and a record created, with the conflict check flagged for a person
  • Existing clients route to the responsible attorney with a one-line summary and a link to the file
  • Anything touching a deadline, a fee quote, or legal advice is never sent — always drafted and escalated

What the managing partner actually notices

The inbox is already triaged before the first person arrives, and nothing went out unreviewed that shouldn't have.

Blueprint, then Build

WhenWhat happens
Weeks 1–2
Blueprint
Workflow spec and data-readiness check. What it does, what it never does, what good looks like, and a fixed quote for the build. You approve this before anything is written.
Week 3Context pack written, and read/write access wired into your system of record
Weeks 4–5Build and test against your real historical data — not synthetic examples
Week 6Pilot on a live subset with every output reviewed by a person. Tune against what actually comes back
Week 7Launch, runbook, and training for the internal owner
AfterThirty days of tuning included. Then Care at $750/month, or you run it yourself

What you own at the end

The workflow spec, the context pack, the runbook, and the governance record. If you ever take this in-house or move on, you leave with all of it.

How it fits together

Each piece makes the next one cheaper.


This is not a menu of unrelated services that happen to share a logo. Every offering feeds the one after it, and the whole thing gets less expensive to run the longer you are in it.

Claude Setup

Deploys and connects it, and produces the context pack everything else builds on.

Policies + Platform

The rules, signed — and somewhere they stay current instead of going stale.

Agent Builds

Automate a workflow. Templates and context mean agent three costs far less than agent one.

Custom Applications

When it needs to be software. Monthly block, so it can change as you watch it run.

Embedded Engineer

The destination. When you want capacity instead of quotes.

The compounding part

Your context pack starts on day one of Claude Setup and never resets. Every correction a reviewer makes twice becomes a permanent rule. Every agent we build inherits everything the last one learned about your business.

By year two, an agent that took six weeks to build in year one takes two — and the accuracy starts higher than the first one ended.

One human standard, everywhere

The vCISO signs the policies. The named engineer signs the agents. Same principle either way: a person whose name is attached, whose judgment is documented, and who can be asked to explain it.

That is what makes this work in a law firm, a bank, a clinic, a factory, a contractor, or a franchise group — and it is the part that generic AI vendors structurally cannot offer.

See one work

This is Frontdesk, handling a morning.


Six things arrive the way they arrive on any Monday. Step through them one at a time — the agent explains each move as it makes it. Watch the two it refuses to touch.

Simulated with sample data. The real agent runs on your systems, with your rules.
How to read this: the left panel is the inbox as it arrived. The right panel is the agent’s own log. The panel underneath is what it refused to decide alone. Click Walk through it and it will take the first email, slowly, and explain each move as it makes it.
Inbox6 waiting
What the agent did—
Press Run the morning to start.
Escalated to a person0
Nothing yet.
0Handled
0Escalated
0Human touches
0Minutes returned

The two it refused are the whole point

A contract termination and a site outage never got an automatic reply. They were read, classified, summarized, and put in front of a named person with the reasoning attached. Any vendor can show you the four it handled. Ask them to show you the two it wouldn't.

What you'd need

Four questions. Then a real number.


Rather than hand you a rate card, answer these and we will show you the one to four things that actually apply to your business — and what they cost.

Fit Finder

Nothing is sent anywhere. This runs entirely in your browser.

Where are you with AI today?

Be honest. Most businesses are further back than they think.

What do you want to happen next?

Pick up to two.

Is anyone asking how you govern AI or security?

Clients, insurers, auditors, a board, a big customer's procurement team.

Once it's running, who owns it?

The honest answer here decides whether this lasts past month three.

Here's what applies to you.

Fixed fees. Model and licence costs pass through at cost — we don't mark up tokens. Every engagement carries a written exclusions list and change control.

Question 1 of 4
Prefer the full price list?
Fixed fee
OfferingWhat it isTimelineInvestment
Claude Setup — DeployTenant, seats, admin controls, SSO, runbook1 week$2,900
Claude Setup — ConnectConnectors into your real systems, scoped and bounded1–2 weeks$3,900
Claude Setup — BuildProjects, skills, house style, and your context pack2 weeks$4,900
Claude Setup — EnableSessions by role, champions, usage instrumented2 weeks$3,900
Claude Setup — all fourSaves $2,700 against buying them separately5–6 weeks$12,900
AI PoliciesAcceptable use, tool inventory, vendor risk, attestation3 weeks$4,900
Security PoliciesFour policies plus NIST CSF 2.0 / CIS v8 crosswalk4–6 weeks$4,900
Full ProgramTen-policy framework. Compliance Ready for firms starting from nothing6–8 weeks$8,900
Agent — BlueprintWorkflow spec, escalation rules, fixed quote for the build2 weeks$4,900
Agent — BuildIntegrated, piloted, launched, tuned 30 days4–5 weeks$10,000
Agent — bothOne agent end to end. Each additional agent $9,9006–7 weeks$14,900
Compliance advisoryAssessments, audit support, governance consultingScoped$225/hr
Monthly
OfferingWhat it coversMonthly
GRC PlatformPortal, annual review with refreshed attestation, regulatory monitoring, questionnaire support$495
Agent CareMonitoring, tuning, and a named engineer — per agent, optional$750
Custom ApplicationsA 30-hour block at $200/hr. Typically six months to live$6,000
Embedded EngineerNamed engineer — one, two, or four days a week$5,900 / $11,400 / $21,900

What is never included

Third-party licensing, AI model and API consumption, and cloud costs are billed to you at cost or held in your own accounts. We do not mark up tokens.

How fixed fee stays fixed

Every engagement carries a written exclusions list and a change-control process. Requests outside scope pause at the boundary and proceed under a written change order — never a surprise invoice.

How to start

Two free front doors. Pick whichever hurts more.


30 minutes · no obligation

AI Readiness Check

Bring one process that eats your week. We will tell you honestly whether an agent can do it, what it would take, and what it would cost — or that it cannot, and why. You keep the assessment either way.

30 minutes · no obligation

Policy Defensibility Check

We compare your last insurance application against your actual environment and show you exactly where you are exposed. No obligation — you keep the findings.

In legal, wealth management, or manufacturing? Your industry has its own free front door.

Then, if it makes sense

Claude Setup starts at $2,900 and takes a week. A Blueprint is $4,900 and takes two. Either one is a real commitment with a real deliverable at the end, and neither obligates the next thing.