Rational RootToronto

Services

Three practices, sold separately. Worth more together.

You can engage Rational Root for any one of these. Most clients arrive needing one and discover the other two were the reason the first never quite worked.

01

Governance

The rules your business runs on.

Most organizations we meet have security controls but no written position — which means no one can say what is allowed, what is prohibited, or who decided. Governance is the cheapest of the three practices and the one that makes the other two defensible.

  • IT policy

    Acceptable use, device standards, remote access, and the escalation path when something goes wrong — written in language a non-technical director can approve.

  • Data-handling guidelines

    What class of data may live where, who may move it, how long it is kept, and what happens at disposal.

  • AI use policy

    Which tools are sanctioned, what may be put into them, what must never be, and how exceptions get approved. The document that lets you say yes to AI instead of quietly saying no.

  • Access and identity standards

    Joiner, mover and leaver processes; privileged access; MFA and conditional access positions stated as policy rather than as settings.

  • Posture documentation

    The evidence pack — what is in place, why, and when it was last reviewed — for insurers, auditors and client procurement.

Outcome. A written, current, board-approvable position on how technology is used in your business.
Fixed-fee engagement: Scoped to organization size · Typically delivered in two to four weeks.
02

Managed Services

The environment, held steady.

The unglamorous floor. Identity, devices, mail, files, endpoints and hosting, monitored and maintained so that nothing above them is built on sand. We have run production environments for organizations since 2011.

  • Microsoft 365

    Tenant administration, mail, files and collaboration — configured deliberately rather than left at defaults.

  • Identity

    Conditional access, MFA enforcement, guest governance, and the lifecycle processes that keep the directory honest.

  • Device management

    Zero-touch provisioning, compliance policies, and a device fleet that is actually enrolled rather than nominally enrolled.

  • Endpoint security

    State-of-the-art detection and response, deployed and monitored, with patch discipline and a defined response path when something fires.

  • Hosting

    Websites, DNS, certificates and mail routing kept correct and documented. Sites that rarely change are moving to fast static builds maintained with agentic tools — fewer moving parts, less to patch, less to attack.

  • A private stack

    We run state-of-the-art tools and transition vendors when a better option earns it. We do not name them: our stack and our clients’ platform constellations stay private, because a published inventory is a head start for an attacker.

  • Helpdesk

    A named point of contact and a ticket trail, with time recorded against work you can inspect.

Outcome. An environment that is documented, monitored, current, and boring — in the way infrastructure should be.
Per-user monthly: Quoted to seat count · Project and hourly work available for organizations not on a managed plan.
03

Agentic Operations

Your judgment, put to work.

We do not sell software and we do not sell hours. We stand up and run your agentic operating system — the context, the playbooks, and the judgment that let your business carry more of its own work. It climbs in three steps, and you can stop at any of them.

  • Context capture

    The plumbing that turns your thinking — meetings, voice notes, documents, decisions — into a durable context your AI can actually draw on.

  • Harness selection

    Choosing and configuring the right surface for the work: Microsoft 365 Copilot, Claude, or a purpose-built agent, rather than whichever one was bought first.

  • Bounded pilots

    One well-defined playbook automated end to end and delivered as a finished result. Fixed scope, fixed price.

  • Operating model

    Your business mapped, the loops defined, and the system stood up to run rather than to demo.

  • Model and tool migration

    As the technology advances we re-platform your system, so you never own a stale tool. We absorb the churn.

Outcome. A system that produces real work each month and gets sharper rather than staler.
See the ladder below: $1,000 → $8,500 → $5,000/mo CAD · Start at the bottom. Climb only as far as the value warrants.

The agentic ladder

Start with an hour.

A single, low-commitment hour, and you climb only as far as the value warrants. Each rung stands on its own — there is no step you are obliged to take next.

02

Build

One project, proven.

A Bounded Pilot

We automate one well-defined playbook end to end — a proposal engine, an intake workflow, a reporting cycle — and deliver a finished result. Fixed scope, fixed price.

$8,500

CAD · fixed · from

03

Operate

Run it as a living system.

Agentic Operating Model + Retainer

We map your business, stand up the full operating model, and keep it sharp and producing month over month — absorbing the churn as the technology changes so you never run a stale tool.

$5,000

CAD / month · from

The tools are ephemeral; the moat is not.

What lasts is your context, your method, and your judgment in the loop. We build with whatever is sharpest today and carry it forward as the technology advances — so your investment compounds rather than expires.

Ongoing engagement

What the retainer covers

A built capability is not a finished one. Models advance, your business moves, and the work that keeps an agentic system valuable is the work of keeping it current and producing.

  • 1
    Production runsThe deliverables your system was built to produce — proposals, models, briefings, reports — generated on demand, on brand, each month.
  • 2
    Engine maintenanceYour templates, context and configurations kept current as your organization, your standards and your priorities evolve.
  • 3
    Model and tool migrationAs the underlying technology advances, we re-platform your system so you always run the sharpest version. You never own a stale tool — we absorb the churn.
  • 4
    Automation and loop tuningNew triggers wired, agent pods expanded, and manual steps removed over time, so the system carries more of the work.
  • 5
    Monthly working sessionA standing review to assess output, prioritize the next build, and capture new context — so the system compounds rather than drifts.
Cadence and accessA single point of contact at Rational Root. Requests handled within an agreed turnaround, with the monthly working session as the fixed touchpoint.
TermAn initial three-month term, continuing month to month thereafter. Either party may conclude with thirty days written notice.
Outside the retainerNet-new builds — a new engine, a new vertical, a new operating model — are scoped and priced separately as fixed-fee projects. The retainer runs and refines what already exists.
Your dataContinuity of the security posture established at setup. Your data remains yours, within defined boundaries; Rational Root holds the keys to your environment.

Next step

Every one of these starts with a conversation, not a contract.

Tell us which of the three you think you need. Quite often it turns out to be one of the others, and we would rather say so early.