GOVERNED AI BLUEPRINT
Nine answers. One workflow. A blueprint you can hand to your owner.
You have a workflow in mind and no written plan for it, and the plan is what legal, security and the budget owner will ask for. Answer nine questions about the workflow, the data behind it and who can approve a change, and this page writes the first draft: where your five controls stand, the permission row for that one workflow, what to switch on first in your own tenant or your own tools (with the date each Microsoft fact was checked, if you run Microsoft 365), what stays off until it is tested, the decision you have to make, and the next step. It works for Microsoft 365, Google Workspace and mixed stacks. No email is needed to read it.
NINE ANSWERS
Answer nine questions. Nothing is sent until you ask.
Eight are choices and one is a sentence: the workflow you want to improve. The blueprint is written on this page the moment you finish, and it gets an address of its own. Do not enter customer records or credentials.
Keep a copy in your inbox.
Enter a work email, company and role to receive this blueprint as text with its address. This records an SIT inquiry for follow-up, and the engineer reads your blueprint before any call. Marketing emails require a separate choice.
YOUR REGISTER
What this browser has worked out so far.
Kept in this browser only; nothing on this list is stored on our server. Each line opens its own address, so you can come back to it, send it to the owner, or clear it. The procurement pack binds every line into one PDF, rebuilt from the addresses when you press the button, with a cover and a contents list.
WHAT IT IS
What is a Governed AI Blueprint?
A one-page plan for one workflow, written from your answers: where your five controls stand, the permission row that workflow needs, what to switch on first in your own tenant or your own tools, what stays off until tested, the decision in front of you, and who makes it.
It is the same eight parts an engineer writes after a scoping call, produced in a minute from nine answers so that the call, if you book one, starts from a draft instead of a blank page. Every Microsoft capability it names carries the date it was checked in our register. If you run Google Workspace or a mix of tools, the blueprint is written for those tools instead: the same five controls, the same permission row, and the settings that exist in your platform.
THE MICROSOFT INSIGHT
Why does the blueprint start with what Copilot can see?
Because Copilot returns only what the signed-in person can already open, so your permissions as they stand today are the boundary, and anything shared too widely is findable from the first prompt.
Microsoft 365 Copilot returns only content the signed-in user already has at least view permission to see, so anything shared too widely is findable from day one. (Microsoft Learn, checked Oct 31, 2026)
Review the permissions first and the pilot inherits a boundary you chose. Skip the review and the pilot inherits every link anyone ever shared too widely.
HOW IT WORKS
How does the blueprint get written?
From a rules table, not a model: each of the nine answers sets a line in the result, and every line can be traced back to the answer and to a dated register entry.
- You answer nine questions on the page; nothing is sent anywhere.
- The page writes the eight parts, with a readiness band and a ninety-day plan, and gives the blueprint its own address.
- If you want it in your inbox, you leave a work email and the blueprint is sent as text with its address.
- If you book the call, the engineer reads your blueprint before it starts.
WHAT IT DOES NOT DO
What can a blueprint written from a form not do?
It cannot test anything. A control is marked assumed or not yet, never tested, because only read-only discovery inside your tenant or your tools can test it.
It also does not know what your tenant looks like, does not quote a price, and does not promise a result. It names the first steps in the right order, which is what most firms are missing when the rollout stalls.
YOUR DATA
What happens to the answers?
They are rendered on the page and encoded in the blueprint's address, and nothing is stored unless you ask for the email, in which case the lead is recorded through the same intake as the contact form.
Do not enter customer records, credentials or anything you would not put in an email. The one free-text answer, the workflow, is the only thing you write; the rest are choices.
THE MONEY
Is the blueprint free and what comes after it?
The blueprint costs nothing and sells nothing. What comes after is your choice: a free four-question check, a fifteen-minute scoping call, or a forty-five-minute working session, and every engagement after that is quoted after the call.
AFTER TWO WEEKS
What will be working after two weeks?
- You hold a eight-part blueprint for one named workflow, with a readiness band, a ninety-day plan and its own address.
- Your five controls are marked assumed or not yet, each with the reason.
- The first capabilities to switch on in your tenant are listed in order, each with the date it was checked.
- The decision in front of you and the person who makes it are written in one sentence.
HONEST ABOUT LIMITS
What this does not do yet
It does not describe a preview feature as available. Blocking a Copilot or Cowork response when the typed prompt contains chosen sensitive information types is in preview and rolling out to tenants. (Microsoft Learn, checked Oct 31, 2026, preview) Preview capabilities appear in part six, what stays off until tested, each with the date it was checked, and the register is refreshed the week of November 23, 2026 after Ignite.
It does not test a control: that takes read-only discovery, scoped in writing after a scoping call.
It does not replace the statement of work or produce a quote.
THE ONE THING TO REMEMBER
Nine answers, one workflow, a blueprint with your name on the decision and a date on every Microsoft fact.
Said another way: the plan your owner will ask for, drafted before the call.
Said a third way: assumed or not yet, never tested, until discovery tests it.
DIRECT ANSWERS
Questions before you decide.
Do I need an email to see the blueprint?
No. The blueprint renders on the page from your answers and has its own address you can reopen. The email is only for keeping a copy in your inbox and it records a lead through the normal intake.
Is the result written by an AI?
No. It is written from a rules table, so every line can be traced to the answer that produced it and to a dated entry in our Microsoft facts register. A model may draft two sentences in a later version, under the same rules.
Can I run it for more than one workflow?
Yes. Each run gets its own address. The blueprint is deliberately one workflow at a time, because one workflow with an owner beats a portfolio with none.
What if my data is outside Microsoft?
The blueprint says so plainly: no Microsoft control reaches it, the boundary is drawn where the data is, and the next step is the private AI readiness check or a scoping call about bringing the data inside a boundary you run.
How is the work priced after the blueprint?
Quoted after a scoping call, assessment separate from implementation, Microsoft-funded where you qualify. No price appears in the blueprint or on this site.
NEXT STEP
Start with a boundary you can explain.
Choose a focused check, or speak with the team about the workflow you need to improve.