AI for Universities and Colleges in Canada
Remolda helps Canadian universities and colleges put AI to work in student services, admissions and administration, within FIPPA or Quebec public-body rules. The first step is a two-week AI Opportunity Audit at $2,900 CAD + HST.
In short
- First step: the AI Opportunity Audit, $2,900 CAD + HST, two weeks, 6–10 interviews, 10+ ranked use cases and a 12-month roadmap.
- Ontario public colleges and universities are FIPPA institutions: since July 1, 2025 a written privacy impact assessment is required before collecting personal information.
- From July 1, 2026, O. Reg. 51/26 requires colleges and universities to report critical cyber incidents within 72 hours after confirming them.
- In Quebec, CEGEPs and listed universities are public bodies: a PIA for new information systems and notice of decisions based exclusively on automated processing.
- Work in English or French; contract and invoice from Innova Consulting Group Inc., Ottawa.
When universities and colleges call us
- Student services inboxes overflow at the start of each term. Admissions, the registrar and financial aid answer the same questions by email and chat, in English and French.
- Faculty and staff already use ChatGPT, Copilot or Claude on personal accounts. The institution needs an approved tool, a written use policy and a clear line on which data may go in.
- Senate or a committee wants a position on generative AI. Deans need a shared framework they can adapt course by course.
- A vendor has pitched an AI add-on for the student information system or learning platform. Procurement wants an independent read before the privacy review starts.
- Research and grant offices re-key the same details across forms. Staff time goes to copying, checking and chasing signatures.
What we automate for universities and colleges
Student inquiry assistant. An FAQ assistant built on the published calendar, program pages and policies answers routine questions on the website or in the portal, in English and French. Each answer links to the page it came from. Staff handle anything that involves a specific student record, an appeal or a wellness concern.
Admissions and transfer credit documents. Document processing reads transcripts and supporting files, extracts courses and grades into a review sheet and flags missing items. The admissions officer makes every decision.
Staff knowledge assistant. An internal assistant over HR, finance and IT policies answers staff questions with a link to the source policy. Policy owners decide what goes into it and review answers that get flagged.
Drafting support for administration. First drafts of committee minutes, reports, grant narratives and routine letters in Microsoft Copilot (formerly Microsoft 365 Copilot), ChatGPT Edu or Claude, under an institutional licence. The author reviews, edits and signs.
AI use policy and staff training. A written AI use policy for staff, a framework for instructors and training by department. Academic integrity rules stay with the institution's senate and faculties.
Canadian rules that shape the work
FIPPA (Ontario). Ontario's public colleges and universities are institutions under FIPPA. Since July 1, 2025, FIPPA requires a written privacy impact assessment before collecting personal information, and reporting to the IPC of breaches that carry a real risk of significant harm. In the project, the PIA is drafted at the design stage, before any student data reaches an AI tool.
O. Reg. 51/26 under the Enhancing Digital Security and Trust Act, 2024. From July 1, 2026, colleges and universities must run a cyber security program, name a senior employee as cyber contact and report critical incidents to the ministry's chief information security officer within 72 hours after confirming them. A new AI tool or integration is added to that program's inventory and incident plan.
Quebec Act respecting access to documents held by public bodies (A-2.1). CEGEPs and the university institutions listed in the Act are public bodies. Section 63.5 requires a PIA for any project to acquire, develop or overhaul an information system involving personal information. Section 65.2 requires telling a person when a decision about them is based exclusively on automated processing. Admissions and aid workflows keep a staff member as the decision-maker.
IPC and OHRC Principles for the responsible use of AI (January 2026). The principles say AI systems must be valid and reliable, safe, privacy-protective, human-rights affirming, transparent and accountable. We use them as the checklist when ranking use cases.
Vendor training terms and data location. OpenAI states that ChatGPT Edu data is not used for training by default. Microsoft states that prompts and responses in Microsoft Copilot are not used to train foundation models. Anthropic's education page says data is used to improve models only with permission. OpenAI offers storage at rest in Canada for eligible Edu customers; processing can happen outside Canada. We check the terms of the plan you actually hold.
These points feed straight into the AI compliance review.
Which package fits
Most institutions start with the AI Opportunity Audit. It covers student services, the registrar, IT and the privacy office in two weeks and ends with a ranked list of use cases. A smaller college or a single faculty can start with the Readiness Review.
| Option | Price (CAD + HST) | Time | Best for |
|---|---|---|---|
| AI Readiness Review | $490 | 1 week | A single faculty or college that needs a fast position on AI |
| AI Opportunity Audit | $2,900 | 2 weeks | A ranked use-case map across student services and administration |
| AI Pilot Sprint | $9,800 | 6 weeks | Building one assistant or document workflow on your approved tenant |
Full scope of each package is on the pricing page.
How the work runs
The work follows the Remolda Cycle: Audit → Strategy → Implement → Empower → Evolve.
- Audit. Interviews with student services, the registrar, IT, the privacy office and one or two faculty members. We look at inquiry volumes by channel, document types and the tools already licensed. Student records stay out of scope.
- Strategy. Ranked use cases, a 12-month roadmap and the PIA questions for the first pilot, reviewed with the privacy office.
- Implement. A six-week Pilot Sprint builds one workflow on the institution's approved tenant. The student inquiry assistant is a common first choice.
- Empower. Training by department, a staff AI use policy and a short guide for instructors.
- Evolve. A quarterly review of answer quality, escalations and the next use case.
In our experience the audit usually takes two weeks from kickoff. It depends on the term calendar, interview availability and the privacy office's review queue.
Frequently asked questions
How much does an AI assessment for a university or college cost?
The AI Opportunity Audit is $2,900 CAD + HST for two weeks: 6–10 interviews, 10+ ranked use cases, a 12-month roadmap and a recommended first pilot. A smaller college or a single faculty can start with the one-week AI Readiness Review at $490 CAD + HST.
Can a university use ChatGPT, Copilot or Claude with student data?
Yes, under an institutional licence and after a privacy impact assessment. In Ontario, FIPPA has required a written PIA before collecting personal information since July 1, 2025. OpenAI, Microsoft and Anthropic each state that institutional education plans are excluded from model training by default or used only with permission; we check the terms of the plan you hold.
Will AI make admissions or financial aid decisions?
In the workflows we design, AI prepares the file and a staff member decides. In Quebec, section 65.2 of the public-body access Act requires telling a person when a decision is based exclusively on automated processing, and offering a review by staff.
Who writes the academic integrity rules on generative AI?
The institution does, through its senate, faculties and teaching and learning office. We draft the staff AI use policy and a framework that instructors adapt to each course.
What does O. Reg. 51/26 change for an AI project?
From July 1, 2026, colleges and universities must run a cyber security program, name a senior cyber contact and report critical incidents to the ministry within 72 hours after confirming them. A new AI tool or integration goes into that program's inventory and incident plan.
How long until a first working AI assistant?
In our experience the audit usually takes two weeks and a pilot six weeks after that. Timing depends on the term calendar, interview availability, the privacy office's review and IT access to the systems involved.
Can the work run in French?
Yes. Interviews, reports, training and the assistant itself can run in English or French, which matters for bilingual institutions and Quebec CEGEPs and universities.
Sources
- IPC Ontario — FIPPA/MFIPPA privacy (institutions covered)
- IPC Ontario — Updates on obligations for provincial and municipal institutions (Bill 194)
- Ontario — O. Reg. 51/26, Cyber Security (Enhancing Digital Security and Trust Act, 2024)
- LégisQuébec — Act respecting access to documents held by public bodies and the protection of personal information (A-2.1)
- IPC Ontario and OHRC — Principles for the responsible use of artificial intelligence
- OpenAI — Enterprise privacy (business data)
- Microsoft Learn — Data, Privacy, and Security for Microsoft Copilot
- Anthropic — Claude for higher education
Facts checked:
Related services
Approach phases
Related insights
Talk to an AI transformation consultant
A 30-minute call: you describe the situation, we tell you what to do first and what it would cost.
Book a 30-min call30 minutes. English or French.