Find it before Copilot does.
The kind of thing we find in almost every Microsoft 365 tenant. Each finding is ranked by what it exposes, then fixed or contained before Copilot reaches the people who shouldn't see it.
Copilot doesn't create the problem. It shows it to everyone.
Microsoft 365 Copilot respects your existing permissions. That sounds reassuring until you look at the permissions. Folders shared with the whole company years ago. Teams nobody remembers creating. Sharing links set to "anyone in the organisation" because it was quicker.
Before Copilot, finding those files took effort, so nobody bothered. Now anyone can ask a plain-English question and get the answer, with sources, in seconds.
What we check, fix and set up.
The depth of each area is agreed in scoping, based on the size of your tenant, your licences and how sensitive your data is.
Oversharing and permissions
Find the access people don't need, rank it by sensitivity and fix it: broad groups removed, owners confirmed, old links cleared. Where clean-up takes time, we restrict what Copilot can search in the meantime.
Labels and classification
A labelling scheme that matches how your business actually handles information, not twelve levels nobody uses. Applied to the content that matters, so protection follows the file.
Data loss prevention
Policies and Copilot-specific controls around your most sensitive information, plus a review of conditional access, guest access and device rules so Copilot is only available the way you intend.
Content clean-up
Old, duplicated and out-of-date content makes Copilot's answers worse. We agree retention and archive rules, deal with abandoned sites and make sure the current policy is the one Copilot finds.
Pilot and use cases
A pilot group and the everyday tasks worth testing: meeting summaries, drafting, finding information, getting through email. Success measures agreed before anyone starts.
Training and adoption
Practical training on real work: good prompts, what Copilot is bad at, how to check its output and what never to paste in. Then we track usage, so you know which licences earn their keep.
Copilot is live. Nobody checked first.
Common, and fixable. We start with the highest-risk exposure – HR, finance, board and client data – and contain it quickly. Then we work through the rest without pulling licences off everyone.
We also look at whether the licences are being used. It's normal to find people who tried Copilot twice and gave up. Training them, or moving the licence to someone who will use it, is usually the quickest win in the whole project.
Fix first. Then switch it on.
Free scoping
Your Microsoft 365 setup, licences, data and what you want Copilot to do. We confirm whether readiness work is needed and roughly how much.
Assess
You approve a written scope and fee. We scan for oversharing and rank every finding by what it exposes.
Fix and contain
Permissions fixed, labels and controls set, anything slow to fix contained so Copilot can't reach it.
Pilot and roll out
A pilot group with agreed use cases and training. Measure, adjust, then roll out with adoption tracking.
A tenant you can trust. A rollout people use.
Readiness ends with evidence, not a slide deck. You'll know what was exposed, what we fixed and what's left. Want your own IT team or MSP to carry out the fixes? Fine. We'll hand over a prioritised plan instead.
Microsoft 365 engineers. Not a training company.
Readiness is mostly security and data work, with training at the end, so engineers lead it. Ours look after Microsoft 365, SharePoint, Entra ID, Defender and Purview for clients day to day, and we've delivered Copilot readiness and rollouts before. We build AI too, so we're straight about what Copilot does well and where a different tool or a custom build would serve you better. If Copilot isn't right for part of your business, we'll say so before you buy more licences.
Staff also using ChatGPT, Gemini or note-takers? Governance sets the policy and controls across every AI tool, not just Copilot.
ExploreMigration, identity and day-to-day running of Microsoft 365 and Azure. The foundation Copilot sits on.
ExploreWhen off-the-shelf won't do: document AI, agents and copilots built over your own data and systems.
ExploreQuestions before you switch it on.
What people ask before a Copilot rollout, answered straight.
It's the work you do before switching Microsoft 365 Copilot on for your staff: finding and fixing overshared content, setting up labels and data protection, cleaning up old information and preparing people to use it. Copilot can only see what each user can already access, so readiness is mostly about making sure that access is right.
Microsoft 365 Copilot works within Microsoft 365 and respects your existing permissions, sensitivity labels and retention settings. The risk usually isn't Microsoft. It's that your permissions let people reach data they shouldn't. Get those right and Copilot is a sensible tool for most businesses. Get them wrong and it makes the problem visible to everyone.
Often not. Microsoft includes SharePoint Advanced Management with Microsoft 365 Copilot licences, and many Purview controls come with the plans you already have. What's available depends on your licences, so we check what you have during scoping before recommending anything else.
Yes, if your data and permissions are already in good shape. We check that first. Training people to use Copilot on a tenant that overshares just teaches them to find the wrong things faster.
Yes. Your MSP or internal IT team can keep running Microsoft 365. We can do the readiness work alongside them or hand over a prioritised plan for them to deliver.
It depends on the size of your tenant and how much has built up over the years. A smaller, well-kept tenant can be ready quickly. One with a decade of open sharing takes longer. We confirm the timetable after scoping rather than quote the same turnaround to everyone.
It's priced on scope: the size of your tenant, how much remediation is needed and how many people need training. You get a written scope and fixed fee before anything starts. The scoping call is free.