Microsoft 365 Copilot readiness
Switch on Copilot before you fix permissions and it reads everything
Copilot inherits every oversharing mistake already in your tenant. The moment it is enabled, an employee can prompt their way into HR files, payroll, M&A documents, and IP that was quietly "open to the org" for years.
What this looks like in real life
A 180-person professional-services firm switched on Microsoft 365 Copilot on a Friday, eager to move before competitors. It went out tenant-wide, with no readiness review. By the next Tuesday an associate had typed a harmless prompt, asking Copilot to summarize partner compensation, and it returned figures from a finance workbook that had been shared with everyone in the organization three years earlier and long forgotten.
What was at risk
- Partner and payroll figures exposed to every employee, instantly searchable by prompt.
- No audit trail of who had already surfaced what.
- A board that had just approved Copilot now asking whether it had to be switched off.
What the engagement produced
A Purview exposure map of the top sites, every overshared location ranked by sensitivity, and a 30-day remediation plan, so Copilot could stay switched on, scoped to what each role should actually see.
The fixed-price answer
One diagnostic resolves it
One fixed fee, agreed before any work starts. The number moves with tenant size and how many sites or mailboxes are in scope. Compact scopes cover smaller single-tenant environments where they apply.
The diagnostic
Copilot & Shadow AI Exposure Report
A Purview snapshot of where sensitive data lives, who can reach it, and exactly what Copilot would surface today, risk-ranked by site.
What you walk away with
What the evidence looks like
A representative deliverable. Yours is built on your own tenant.
Senior-delivered
One senior engineer scopes it and runs it, start to finish.
Read-only access
Settings and permissions only are inspected. No files are opened and no data is moved.
Fixed scope
A defined deliverable and a definition of done, agreed before anything starts.
Not sure this is the one?
Talk through the problem. The reply confirms whether this assessment fits, or points you to the one that does. The engineer who scopes it is the one on the call.
Talk through the problemWhat happens next
- 1Describe the situationA few short fields: company size, environment, and what is going wrong.
- 2A reply within one business dayA first read of what you sent, and if it is a fit, a private scheduling link.
- 3A fixed-fee proposalNamed scope, price and definition of done. No obligation.
$3,450 to $4,500
Roll Out Copilot Safely