A risky AI use alert gets an owner
The sample response names who reviews and who may act.
Coming
See every demonstrationPROFESSIONAL SERVICES
Tools that live inside your Microsoft 365, governed like everything else.
Every tool the firm buys lives outside Microsoft 365 and you end up governing it by hand. The fix is a CRM, a marketing method and a project record that sign in with Microsoft Entra, keep data in your tenant, and expose their actions to Copilot and agents under Microsoft Agent 365.
01 Source02 Boundary03 Human decision04 Evidence
HOW IT WORKS
The control path in practice.
- Map the tools that hold client data outside the tenant boundary.
- Bring the first one inside: Entra sign-in, data in your tenant, actions under Agent 365.
- Give its agent a permission row and a person at the gate.
- Review the estate monthly against the same evidence pack.
THE WOUND
Why do you end up governing every tool by hand?
Because each tool the firm bought lives outside Microsoft 365, with its own sign-in, its own data store and its own idea of who may see what.
Your CRM is not under the same identity and data rules as the rest of the tenant. The fix is a CRM, a marketing method and a project record that sign in with Microsoft Entra, keep data in your tenant, and expose their actions to Copilot and agents under Microsoft Agent 365, governed like everything else you already secure.
THE MICROSOFT INSIGHT
What happens to a tool's agents once it lives inside the tenant?
Agents built with Microsoft Foundry, Copilot Studio and Agent Builder join Microsoft Agent 365 automatically, and agents built elsewhere join through registry sync or the SDK.
Agents built with Microsoft Foundry, Copilot Studio and Agent Builder are integrated with Microsoft Agent 365 automatically; agents built elsewhere join through registry sync or the Agent 365 SDK. (Microsoft Learn, checked Oct 31, 2026)
Inside the tenant, a tool's agent gets the same owner, identity and review as your users. Outside it, you govern it by hand, again.
THE METHOD
How does a firm bring its tools inside the boundary without a migration project?
One tool at a time, starting with the one that holds the most client data, each with Entra sign-in, data in your tenant and a permission row for its agent.
- Map the tools that hold client data outside the tenant boundary.
- Bring the first one inside: Entra sign-in, data in your tenant, actions under Agent 365.
- Give its agent a permission row and a person at the gate.
- Review the estate monthly against the same evidence pack.
THE PRODUCTS
What do Simple Growth and SimpleOS Reach have to do with this?
They are the CRM and the marketing method built for this boundary: Entra sign-in, data in your tenant, actions exposed to Copilot and agents under Agent 365, with a free trial on the Microsoft Marketplace listing.
They are Simple Intelligence Group software products, separate from Simplicity IT services. Simplicity IT does the governance and the switch-on; the products carry their own pages, trials and plans on the Simple Intelligence Group site, and their Marketplace listings are pending.
A tool that ships with its method and lives inside the tenant is governed on day one. A tool bolted on from outside is a governance project every quarter.
THE FIRST RUNG
Where does a firm IT lead start?
With the free AI security check, then the Marketplace trial of the tool that fits, then the Governed Workflows pack for your industry.
Migration from your current CRM, what happens to your data if you leave, and how it works with Teams Phone are the three questions answered in the scoping call, in writing.
AFTER TWO WEEKS
What will be working after two weeks?
- The tools holding client data outside the tenant are mapped, with owners.
- The first tool is signed in through Microsoft Entra on a trial, with its data boundary written down.
- Its agent has a permission row and a named approver.
- You hold the switch-on scope and its quote as a written decision.
HONEST ABOUT LIMITS
What this does not do yet
It does not govern a tool whose vendor never registers its agents. Microsoft Agent 365 is the control plane that observes, governs and secures agents built on Microsoft platforms or acquired from third parties, through the Microsoft 365 admin center, Microsoft Entra, Microsoft Purview and Microsoft Defender. (Microsoft Learn, checked Oct 31, 2026) Vendor agents join through registry sync or the Agent 365 SDK, so vendor fit is checked during the mapping step.
It does not migrate every tool at once: one at a time, each its own decision, each with rollback.
It does not price Dynamics 365 or any other product on this page: the Marketplace listing carries the plan, and services are quoted after a scoping call.
THE ONE THING TO REMEMBER
Tools that sign in with Entra, keep data in your tenant and expose actions under Agent 365 are governed like everything else you already secure.
Said another way: stop governing by hand by bringing the tools inside the boundary.
Said a third way: one tool at a time, each with an owner, an identity and a gate.
SHOW YOUR WORK
See the control path on a fictional bank.
DIRECT ANSWERS
Questions before you decide.
Can we migrate from our current CRM?
Yes. Migration is scoped in the scoping call: what moves, what is archived, and what happens to your data if you ever leave, in writing before the trial ends.
Does it work with Teams Phone?
The call card and the calendar work where your people already are in Microsoft 365, including Teams. The scoping call confirms the exact integration for your tenant.
Who owns the product and who owns the service?
Simple Growth and SimpleOS Reach are Simple Intelligence Group products running in production, with access arranged through Simple Intelligence Group; their Microsoft Marketplace listings are pending. Simplicity IT provides the governance, the switch-on and the Governed Workflows pack as services.
What does the free trial include?
The listing on the Microsoft Marketplace states it. Nothing on this page quotes a price or a plan; the trial is started from the listing and the plan is chosen there.
How is the service priced?
Quoted after a scoping call. The mapping is read-only and scoped separately from the switch-on of each tool.
NEXT STEP
Start with a boundary you can explain.
Choose a focused check, or speak with the team about the workflow you need to improve.