Talk to us for 15 minutes
Come as you are.
A quick call, consultation, or demo. You tell us what’s going on. We tell you what we see.
Book a timeWhat we run
Know who you let in, and what they can reach.
We keep a living list of your vendors and set the terms your AI tools work under, so each one reaches only what it should.
- A vendor asks in, and your named owner vouches for them
- Our keeper writes them in the vendor register and hands over a pass with a review date
- In the library, an AI tool reads the data it may reach, and the locked chest stays locked
- The review date comes, the pass comes back, and the ledger line is struck
The visitors' ledger
Every vendor is written in, with an owner on each side.
One living list of every tool and vendor you depend on: who owns it, what data it holds, how it signs in, and when it renews. A specialist keeps it true, and shows which entries came from discovery and which from asking.
- An owner on each sideA named owner on your side and a named specialist on ours, accountable for each entry staying true.
- What it holds, and how it signs inThe kind of data each vendor holds, whether it signs in through your identity provider, and the access it was granted.
- Renewals you see comingRenewal dates tracked ahead of the charge, and tools nobody has opened in a year surfaced while there is time to cancel.
Discovery shows every tool that signs in through 
Microsoft 365 or Google Workspace, or holds a grant in your tenant. A specialist asks after the rest, at onboarding and as things change.
The library
AI tools read what they may, and the rest stays locked.
Whichever assistant you choose, we close the oversharing it could reach, set baselines on the tools you keep, and put a short policy behind it, so you can show how you decided.
- The oversharing, closed firstFile shares set to everyone, mailboxes with delegated access, and sites inheriting a template, closed before any AI tool is pointed at them.
- Baselines that holdWhich data each tool may reach, which accounts may use it, what gets logged, and what stays blocked, set in your tenant.
- A policy behind itA short acceptable-use policy your team can read, with a record of who has acknowledged it.
Where a reference point helps, we work from the NIST AI Risk Management Framework and ISO/IEC 42001.
You are at the start of the AI path. 5 stops through the site, in order.
Governance
Find out what you run, and what it can reach.
Fifteen minutes on what is connected to your tenant today, who owns it, and what your team's AI tools can reach.
Check your setup first
Know where you stand.
A hygiene check shows where your Microsoft 365 or 
AWS stands before you commit to more.
Start with one service
Start where you need us.
Need one thing handled? Sign up for just that, and add more whenever you’re ready.
See the plansYou run the company. We keep watch.