A two-week, fixed-fee audit of your Microsoft 365 tenancy against the reality of an LLM with search permissions. Ends with a clear go / no-go and a fix list.
A serious Copilot readiness review covers four things. We work through them in parallel, with a go / no-go recommendation and a remediation plan at the end.
Plus a written go / no-go recommendation — deploy now, deploy with mitigations, or hold — sized for your exec team to make a call, not a briefing to schedule another workshop.
Every finding scored by likelihood and impact, with a named owner and a suggested remediation path.
What to fix in week one, what to fix before rollout, and what can be addressed as ongoing hygiene.
A short, board-ready deck translating the technical findings into business risk and investment asks.
The raw scan output, permission maps and screenshots — so your IT team can act without re-discovering the work.
A readiness review is about Copilot — but Copilot isn't the tool most tenants are actually worried about. Staff pasting documents into ChatGPT, Claude or Gemini is.
Purview handles what the data is — labels, DLP, retention. Defender for Cloud Apps handles where it's allowed to go — which AI apps staff are using, which OAuth consents have been granted, and whether a sensitivity-labelled document can be pasted into ChatGPT at the session layer. Neither closes the loop on its own.
The readiness review picks up both planes. When the findings include shadow AI or unaudited tenant consents — they usually do — the fix path runs through the AI security perimeter programme, not the data-governance sprint alone.
No tenancy is clean. The question is whether the mess is the kind Copilot will quietly amplify.
Delivered by M-Tech Labs with the compliance and security discipline of M-Tech Systems — Cyber Essentials certified, aligned to NCSC CAF 4.0 and progressing through the Assurix trustmark programme. Code is continuously scanned for quality and security with Aikido, and hosted software runs on our own Nutanix / Fortinet platform — continuously pen-tested, current-version, UK-based. See secure development for the full picture.
Back to AI ConsultancyTwo weeks, fixed fee, clear answers. If you're within a month of flipping the switch, this is the pre-flight check.