The point that stuck with me
I was listening to a conversation with Alex Hormozi recently. Hormozi is the founder of Acquisition.com and the author of $100M Offers and $100M Leads.
He made a point that stuck with me. Reality is the moat.
Here is how that lands in NZ IT and AI.
Why AI slop makes proof scarce
Anyone can now produce polished AI advice. The tools are free. The slop is infinite. The content itself is no longer the moat.
Three years ago, good advice was scarce, so having any was an advantage. Today the words are free. When everyone has access to the same frameworks and the same confident posts, what becomes scarce is the thing that cannot be generated. Proof. Track record. Receipts.
I notice this in my own inbox. The pitches are better written than they have ever been, and I trust them less than I ever have, because good writing stopped being evidence of anything.
The stakes point
The higher the stakes of being wrong, the more buyers demand credibility of source.
If a wrong AI decision means you wasted a weekend, you will take advice from anyone. If a wrong AI decision means you leak client data, you breach your cyber insurance, or you hire the wrong people and waste a quarter, you stop listening to people who cannot prove they are safe.
That is the shift happening in NZ right now. Owners who treated AI as a toy a year ago are treating it as a regulated, security-sensitive decision now.
Sharpening the point for NZ IT
Hormozi’s “reality is the moat” means brand and track record in his world. In NZ IT and AI, the strongest available form of reality is independent certification.
Because anyone can claim a track record. Very few firms can prove governance to a third-party standard, in front of an auditor who is being paid to find the gap.
OxygenIT is the only NZ IT provider certified to both ISO 27001 and ISO 42001, as at May 2026. We hold them because governance is the product, not the marketing copy.
The cowboy problem
We know what a good process looks like, versus the cowboy who just wants to get something implemented and move on.
When your AI breaks in six months, who has the documentation to fix it. Or does your business just break.
The cowboy sells the demo and disappears. The demo is the easy part. It is month seven that separates firms, when the model has been updated, the person who set it up has left, and nobody wrote down why it was configured that way.
What dual ISO actually gives you
ISO 27001 is the international standard for information security management. ISO 42001 is the international standard for AI management. Three things holding both means for a client firm.
- The AI deployed in your business is governed by a documented system, not vibes.
- When something breaks in six months, there is a process to fix it, not a panic.
- Your cyber insurer, your board and your largest client can ask for the documentation, and you have it.
That is the moat. Not the words. The documentation.
Three questions to ask any provider, including us
If proof is the filter, use it. These take a minute each and the answers are very hard to fake.
What did you run inside your own business before you sold this, and what did it do to your numbers? Vague answers here are the whole story.
Show me the governance documentation. Not a slide about governance. The actual document, with a date and an owner on it.
What is your process when this breaks in six months? If the answer is “it won’t”, you have learned what you needed to know.
We hold ourselves to the same three. Two years of internal AI work before we sold a word of advice. Our own support tickets cut by half and our time to resolve cut by half, which took up to 50 percent off our cost to serve. 98 percent client retention across our Canterbury clients from 2022 to 2025. Those are the receipts.
The standard for this series
Every week is something we have run inside our own firm or inside a real NZ client firm. No theory I have not run myself. No invented case studies.
In a market where confidence is free, that constraint is the only thing that makes any of this worth your time.
What to do next
If you want to work out where your firm sits on the proof scale, book a 15 minute call with me. If it is not a fit, I will say so. The 15 minute AI Readiness Audit is the lighter first step.
Week 4 of The AI Divide lands next week. Race to elevate, not replace.
