Governed AI Briefing
Security, legal and the business leave with one question, the pilot that answers it and the scoping call booked.
See the engagementWAYS TO START
Eighteen fixed engagements, each with its weeks and where it is bought.
From a free hour to a managed service. Every one has a fixed length, a written deliverable list and a storefront, and every one starts read-only. No price appears on this site; the quote follows the scoping call.
01 Source02 Boundary03 Human decision04 Evidence
THE FREE HOUR
One hour, no access to your systems, one governed AI question chosen in writing.
PILOTS, FOUR WEEKS EACH
Your own Microsoft 365, one control, tested on a scoped group before anyone widens it.
Shadow AI Pilot
Find the AI tools your people already use from managed devices, sign one app list, test a scoped block.
See the engagementConfidential Sites Pilot
Find who can reach your confidential sites, label the content inside them and test the enforcement.
See the engagementClient Data and AI Pilot
Trace where client data actually goes before the first enforced block lands on it.
See the engagementASSESSMENTS
Read-only, a written go or no-go, and the scope of the build quoted separately.
Copilot Access Review
Test what a cohort can reach before you add Microsoft 365 Copilot seats.
See the engagementWindows 365 for Agents
Decide whether a computer-using agent may run in a Cloud PC you control.
See the engagementAgent 365 Readiness Review
Which of your agents are covered since the July cutover, who owns each one, and what to do first.
See the engagementFoundry Agent Production Readiness
Decide whether a Microsoft Foundry workload is ready for production, with evidence per gate.
See the engagementView the Microsoft Marketplace listingiboss and Purview AI Data Security
Find which AI data paths iboss catches, which Purview catches and which neither does.
See the engagementAgent Consolidation
One decision per agent across every platform: keep, migrate, merge, rebuild or retire.
See the engagementPROGRAMS AND IMPLEMENTATIONS
A fixed scope with a pilot before any wave and rollback written first.
AI-Ready Foundation
Close the oversharing (files shared with more people than intended) before Microsoft 365 Copilot goes live.
See the engagementBuy through Microsoft MarketplaceAI Governance Starter
Turn the AI policy you signed into controls Microsoft Purview enforces.
See the engagementBuy through Microsoft MarketplaceAI Readiness Remediation
Measure the seven readiness pillars before you sign the license commitment.
See the engagementBuy through Microsoft MarketplaceSecurity Copilot for SecOps
Put Microsoft Security Copilot on Microsoft Sentinel so analysts decide instead of transcribe.
See the engagementBuy through Microsoft MarketplaceMicrosoft 365 Security Implementation
Identity and endpoint baselines, piloted on a scoped device group before the wave.
See the engagementView the Microsoft Marketplace listingForward-Deployed AI Engineering
An engineer inside your team until one governed workflow is in production with its evidence.
See the engagementMANAGED SERVICES
Ongoing, with named owners, a monthly evidence pack and a defined stop path.
Managed Private AI
Tenant-private or local AI, chosen from the tested workload, run with its boundary kept.
See the engagementManaged Copilot Optimization
Evidence per department before the Copilot renewal, every month.
See the engagementTHE SHAPE
What do the eighteen engagements have in common?
A fixed length and a deliverable list written before the start. A storefront where it is bought. A read-only first week. A written decision at the end, which the next scope is quoted from.
Five kinds: the free hour, the four-week pilots, the assessments, the programs and implementations, and the managed services. The table above gives each one its length, its storefront and one line. The page behind it gives the weeks, the deliverables, what access it needs and what it does not do.
THE MICROSOFT INSIGHT
What licensing change do the engagements plan around?
Microsoft Agent 365 is licensed by user, included in Microsoft 365 E7 and sold as an add-on below it. The agent engagements name which path you are on before the first week.
Microsoft Agent 365 became generally available for commercial customers on May 1, 2026, is licensed by user rather than by agent, is included in Microsoft 365 E7, and is sold as an add-on to Microsoft 365 E5, A5 and Business Premium or to the Defender Suite with the Purview Suite. (Microsoft Learn, checked Nov 4, 2026)
Name the license path on the page and the engagement ends with controls switched on. Leave it to the end and the engagement ends with a purchase request.
THE ORDER
Which engagement comes first?
The free hour when the question is not yet chosen. A pilot when one control needs a tested answer. An assessment when a decision is waiting on evidence. A program when the decision is made. A managed service when the evidence has to keep arriving.
- Choose the question in the free hour.
- Test one control in a pilot.
- Get the written go or no-go from an assessment.
- Fund the program, then the managed service.
THE STOREFRONT
What do public plan and private offer mean here?
A public plan on Azure Marketplace is bought through the Azure portal and billed against your Microsoft agreement. A private offer is a Marketplace listing you can read but buy only through a link we send after the scoping call; Microsoft does not show those in search. Twelve engagements are quoted after a scoping call while their listings are published.
Know the storefront before procurement asks and the purchase order is one step. Find out afterward and the order waits for a vendor onboarding that the listing would have skipped.
THE FIRST RUNG
What happens before any of them starts?
A free check or one of the five free tools, then a fifteen-minute scoping call. The engagement is then scoped in writing with its length and deliverables, and the quote follows the call.
Microsoft funding is checked for your Microsoft 365 (your tenant) before it appears in a proposal. No price is published on this site.
AFTER TWO WEEKS
What will be working after two weeks?
- You have picked the engagement that matches the decision in front of you.
- You have read its page and hold its length, its deliverables and its storefront.
- You have taken the matching free check or tool and marked what is tested.
- You hold the scoping call summary and the quote as a written decision.
HONEST ABOUT LIMITS
What this does not do yet
It does not promise that every listing is live on the day you look. Usage-based billing becomes the default for new Microsoft 365 Copilot Business licenses bought through CSP in Microsoft fiscal year 2027 quarter three, January to March 2027, moved from December 1, 2026 in the November 3, 2026 Partner Center update; the default spending limit stays at 4,000 Copilot Credits for each user each month and admins change it in Partner Center or the Microsoft 365 admin center. (Microsoft Learn, checked Nov 4, 2026) Three engagements are quoted directly while their listings are completed, and Microsoft moves its own dates, so the page says what is true on the date it was checked.
It does not bundle engagements into a program before the first one has produced evidence.
It does not publish prices: every engagement is quoted after a scoping call.
THE ONE THING TO REMEMBER
Every engagement is fixed in length, read-only first and quoted after the call.
Said another way: the page is the scope, and the storefront is the contract you already hold.
Said a third way: start with the free hour if the question is not yet chosen.
SHOW YOUR WORK
See the control path on a fictional bank.
The agent action gate
The fictional bank records the exact action and approver.
Coming
See every demonstrationDIRECT ANSWERS
Questions before you decide.
Are the eighteen all live listings today?
No. Six are live on Microsoft Marketplace (AI-Ready Foundation, AI Governance Starter, AI Readiness Remediation, Security Copilot for SecOps as public plans; Foundry readiness and Microsoft 365 Security Implementation by private offer). The other twelve are quoted after a scoping call while their listings are published; each card says which.
Can a four-week pilot be bought without the free hour?
Yes. The free hour is for choosing the question. When the question is already chosen, the pilot page is the start and the scoping call confirms the scope.
What does a listing not include?
Licenses, hardware, changes outside the named tenant and anything the page lists under what it does not do. Each page carries that list.
How are they priced?
Quoted after a scoping call, with assessment scoped separately from implementation. No price appears on this site.
Which engagement needs Microsoft 365 E7?
None. Each runs on the licenses you hold today. Where a control needs a higher tier, the page names it and marks it as a plan item, not a block.
NEXT STEP
Start with a boundary you can explain.
Choose a focused check, or speak with the team about the workflow you need to improve.