The tenant
Copilot stays unsafe while the shared drive is.
Purview, oversharing, labels, the right seats. Then a 30-day pilot on the seats you actually need.
Copilot is sitting on a tenant that would fail an insurer. That is the cost of waiting.
Who this is for
Firms that already bought Microsoft 365 Copilot, or are about to. Professional services of 50-200, where every shared mailbox is a biography of the client book. South West wealth and IFA firms, where a prompt must not surface another family's file.
If nobody owns the tenant, start with the fractional Head of IT seat. This page is the tenant sprint inside that work.
Governance
We make the tenant fit to try Copilot.
Then a 30-day pilot. Measured. Narrow. On the seats that will tell you the truth.
How it runs
01 Diagnose. We sit with the people who actually run the tenant. We look at sharing, labels, and the licences already on the bill.
02 A 90-day window, with a 30-day pilot inside it. First the tenant. Then the pilot. Board-readable outcome: what is safe, what is not, which seats earned the licence.
03 Then a retainer if the seat still needs filling. Governance drifts. Someone has to own it. Or we leave the place stronger.
What you leave with
Questions
No. Most firms buy first. The work is still the tenant, then a 30-day pilot on the seats you actually need. Unused licences are a bill problem. Unsafe licences are an insurer problem.
Copilot reads what people can already see. If oversharing is the culture, Purview is how you prove you stopped it. Labels, DLP, audit. The boring layer that makes the pilot honest.
We pilot the seats you actually need. Whole-firm rollouts wait for the tenant and the KPI. This is readiness and a 30-day pilot.
No. A tenant that would fail an insurer still needs the evidence pack. The two sprints often run together.
Yes, if it works. We sit above it. The MSP still handles the tickets the new labels create.
Related