Cloud & Microsoft 365
Cloud Services
Practical Microsoft 365, Azure, and hybrid cloud work that improves access and resilience without creating an unmanaged bill.
AI governance
AI Security & Governance
Use AI on purpose, not by accident.
A practical plan for how your business uses AI: which tools are approved, what data can go where, and how Microsoft 365 Copilot and other assistants are secured before they are switched on.
THE PROBLEM
AI features are arriving inside tools you already pay for, and staff are trying public AI apps on their own.
Without a policy and the right permissions, an assistant can surface files to people who were never meant to see them, and nobody can say which tools hold company data.
OUTCOMES
An inventory of AI tools in use and a clear approved list
A written AI acceptable-use policy staff can follow
Permissions and sensitivity labels cleaned up before AI assistants can reach your data
WHAT'S INCLUDED
- Discovery of AI apps and browser extensions in use across your environment
- AI acceptable-use policy and data-handling rules written for your business
- Microsoft 365 Copilot readiness: oversharing review, permissions cleanup, and sensitivity labels
- AI risk review for the software vendors you already use
- Staff training on AI-written phishing and voice-impersonation scams
- Written documentation of your AI policy, approved tools, and controls for insurance and compliance reviews
HOW IT WORKS IN PRACTICE
AI is already built into the email, browser, and Microsoft 365 tools your team uses. We help you decide which tools are approved and what data can go where, and we clean up permissions before an assistant can read everything.
- DiscoverWhich AI tools are in use.
- DecidePolicy, approved list, data rules.
- EnableCopilot readiness, private AI, staff training.
AI acceptable-use policy: sample outline
Illustrative example with sample values; not client data.- Approved AI tools and who may use them
- Data that never goes into AI tools
- Review before anything AI-written is sent
- Company sign-in only, no personal AI accounts
- Reporting mistakes and suspicious AI-written messages
- When this policy is reviewed
Context: Texas's Responsible AI Governance Act (HB 149) took effect January 1, 2026, and it recognizes alignment with the NIST AI Risk Management Framework. This is general information, not legal advice; talk to your attorney about your obligations.
WHAT THIS SERVICE DRAWS
AI
Clear lines, on purpose and in writing: which tools are approved, what data can go where, and which actions AI may draft but never take on its own.
HOW WE DO IT
- 01
Discover
Find the AI tools, extensions, and built-in assistants already in use.
- 02
Decide
Write the policy, the approved list, and the data rules.
- 03
Enable
Prepare Copilot or private AI, and train staff on safe use.
- 04
Review
Revisit the list and the policy as tools and rules change.
RELATED
Strategy
vCIO & Compliance
Strategic IT leadership from a virtual CIO (vCIO) for owners who need a technology plan, a budget, and evidence that controls actually exist.
Private AI
Private AI
A private AI assistant for your team that runs on dedicated hardware we manage, so prompts, files, and answers stay under your control instead of a public AI provider's.
