Microsoft Copilot and AI readiness
AI assistants can save real time on drafting, summarising and searching, but they also find every file a person is allowed to open. We help you tidy permissions first, set sensible rules for AI use, and work out where Copilot is genuinely worth paying for in your business.
Microsoft Copilot & AI readiness for small and medium businesses
Microsoft 365 Copilot answers questions using the email, chats and documents the person asking can already access. That sounds safe, and in a well-run tenancy it is. In practice, many small businesses have folders shared with everyone, old links open to the whole company and a salary spreadsheet sitting in a library half the staff can see. Nobody noticed because nobody went looking. An AI assistant will happily go looking on someone's behalf.
So readiness starts with data rather than licences. We review who can see what in SharePoint, OneDrive and Teams, close the overly broad shares, label sensitive information and decide what should be kept out of AI results entirely. At the same time we write a short AI use policy in plain language: which tools are approved, what must never be pasted into them, and how staff should check AI output before it goes to a client.
Then comes the useful part. Rather than buying a licence for everyone, we usually start with a small group whose work suits it, such as people who write a lot of reports, sit in long meetings or answer similar questions every week. We help them build habits that save time, measure what changes and use that to decide whether wider rollout makes sense. Free Copilot Chat may cover some staff without any extra licence, and we explain the difference.
What's included
Permissions review
A check of SharePoint, OneDrive and Teams for files shared too widely, with the riskiest exposures fixed before any AI tool is switched on.
Sensitive data labelling
Labels for confidential material such as HR, payroll and client records, with rules that keep them out of the wrong hands and out of AI answers.
AI use policy
A short written policy covering approved tools, information that must never be entered and how staff should check AI output.
Shadow AI check
A look at which AI websites and apps staff are already using, so you can approve the safe ones and block the ones that keep your data.
Licence advice
A clear comparison of free Copilot Chat and paid Microsoft 365 Copilot, so you buy licences only for people who will use them.
Pilot group
Copilot rolled out to a small group first, with use cases chosen for their roles and results reviewed after a few weeks.
Practical training
Short sessions on writing good prompts, summarising meetings and email threads, and drafting documents from your own files.
Ongoing governance
Regular checks that new sites and shares follow the same rules, so the tenancy stays tidy after the project ends.
Who is Copilot and AI readiness for?
AI readiness work makes sense if:
- Directors are asking whether the business should buy Copilot
- Staff are already pasting work into free AI chat websites
- You have no written rules about using AI tools
- Shared folders have grown for years without a permissions review
- You hold sensitive client, health or financial information
- A client or insurer has asked how you control AI use
Not sure where to start?
Our free IT health check looks at your devices, accounts, backups, security and network. You get a short written report with what is working, what is at risk and a price to fix it. No obligation.
Book the health checkMicrosoft Copilot & AI readiness questions
Will Copilot let staff see files they shouldn't?
Copilot respects existing permissions, so it only shows people what they could already open. The risk is that many tenancies grant far more access than anyone intended. That is why we review and tighten permissions before switching it on.
What is shadow AI?
It is staff using AI tools the business hasn't approved, often free websites where pasted text may be kept or used to train models. It is usually well meant, which is why a clear policy and a good approved alternative work better than a blanket ban.
Is our data used to train Microsoft's models?
Microsoft states that prompts and responses in Microsoft 365 Copilot used with a work account are not used to train its foundation models. Consumer AI tools often have different terms, which is one reason the policy matters.
Do we need Copilot for everyone?
Rarely at first. Some roles get a lot out of it and others very little. We start with a pilot, measure the time saved and expand only where it pays for the licence.
What about the Privacy Act?
Your obligations under New Zealand privacy law apply to AI use like any other handling of personal information. We help you keep personal data out of unapproved tools and record which tools are approved, and suggest legal advice for anything specific.
How long does readiness take?
For a small business, a permissions review, policy and pilot setup usually take a few weeks. Larger or untidier tenancies take longer, and the scope is quoted in writing first.
Can you help with AI tools other than Copilot?
Yes. The same principles apply to ChatGPT, Gemini and the AI features built into apps you already use. We help you decide which to approve and how to set them up with business accounts.
Other ways we help
Managed IT
One monthly price per person for support, security, updates and backups. Your outsourced IT team.
Managed ITIT support
Remote and onsite help when you need it, billed by the hour. No plan, no contract.
IT support
Cyber security
Practical protection against scams, ransomware and account takeover, set up and kept current.
Cyber security