A calm, bounded check of the access, credentials, AI tools and automations running inside your business. Practical owner clarity. No scare stories.
For small businesses, bars, hotels, restaurants and independent operators in Pattaya and beyond who have adopted modern tools over time. You use Google Workspace, Meta Business Suite, LINE Official, cloud POS systems and new AI tools like ChatGPT or automated webhooks—but nobody has done a dedicated check on who still has access or what is happening automatically.
A structured, non-intrusive examination focused on practical owner risk, access paths and automation authority.
Who actually owns your primary business logins, domains and digital channels?
Do former employees, contractors or past agencies still have active access?
How are staff using tools like ChatGPT, Claude or Copilot in day-to-day work?
What can your automations, scripts and connected apps do on their own?
A clear, transparent process from initial intake to agreed scope. No surprise charges and no automatic execution.
You complete a short intake. Never send passwords, secret keys or customer datasets.
Your intake is securely received and reviewed by Chris.
Within 24 hours Chris confirms whether the Security Check fits and gives you the price before anything starts.
Nothing is charged and no review starts until you agree.
We review the relevant settings with you by screen share or guided walkthrough. You make account changes yourself unless you explicitly ask Acorn to help. Acorn never needs your password.
You keep complete control of every login. No remote control software, no admin delegation and no shared credentials.
Common access and automation risks in small-business setups. (Illustrative examples, not claims regarding specific Acorn customers).
A former manager created the Facebook page 3 years ago under their personal profile. The current owner is only an editor and cannot remove them.
The main reception or booking email is logged in across 5 phones and till tablets. Password hasn’t been changed in 18 months; no two-factor check.
Staff pasted guest details into an AI tool without first checking the business's data-handling settings, retention terms or whether that information needed to be shared at all.
A Zapier or n8n workflow was set up to confirm bookings automatically. A bad input sent incorrect pricing to 40 guests without human approval.
An OpenAI key with unrestricted card billing was pasted into a staff group chat so a freelancer could test a feature.
The primary domain and email registrar are tied to a former contractor’s personal phone. If the owner loses access, the business is locked out.
You receive a calm, evidence-led report written in straightforward business English—not 80 pages of vulnerability scanner output.
System checked and confirmed with appropriate ownership, strong access boundaries and proper human controls.
Specific access hazard or data exposure observed. Concrete remediation required.
System records are inaccessible, missing or unverified. Kept visible so nothing is assumed.
Start with an objective assessment. Remediate what needs fixing. Keep Ongoing Guard for the future.
A bounded, one-off inspection of your accounts, staff access, AI usage, credentials and automations. Delivered as a prioritized Owner’s Report with a fixed quote agreed before we start.
Once you review the report findings, you can hire Acorn for a bounded fix sprint: reclaim accounts, lock down MFA, rotate exposed keys and install approval gates.
Continuous monitoring and periodic re-verification of access paths and automations. (In development — not advertised as operational today).
We believe in complete truth about capability. To avoid any confusion:
Acorn never asks for, receives or stores your passwords, credit cards or master encryption keys. System inspections happen collaboratively on screen with the owner present. Your findings remain strictly private.