The AI Exposure Check: what AI can already see, in writing.
Before anyone switches AI on, I find out what it could already see, what your staff are pasting into it, and the three things to fix first. In writing, in plain English, in two weeks.
What you get: four pages, not a deck.
A written decision you can read in ten minutes and forward to a partner. Every finding names a real file, setting or tool, not a category.
Where your data is already going
Every AI tool in use at your firm: what the sign-in logs show, browser extensions, meeting note-takers, and your own list. For each one, whether it can see client files.
What Copilot would surface today
Links open to the whole firm, folders shared with "Everyone", sites where the permissions broke years ago, and the five most sensitive files reachable by the most people. Gathered read-only. No AI touches your data during the Check.
Who needs a licence, and who doesn't
Named people: the daily heavy users who need a Copilot seat, the light users who are cheaper on pay-as-you-go, and whether the free Copilot Chat is enough for everyone else.
The model decision
Some AI models inside Copilot are on by default. Whether they stay on is your choice, written down in plain English so you can make it.
Three fixes, priced
The three things to do first, each with a fixed price, and which of them the AI Guardrails set-up would cover.
How it works.
Two weeks from the day I have access. About ten hours of my time, none of yours beyond the read-out.
You grant read-only access
A read-only admin role, or a dedicated read-only account, on any Microsoft 365 Business plan. I can look; I can't change anything. You can remove it the day I finish.
Two weeks of looking
I run Microsoft's own reports and read-only scripts against your tenant, go through what they find, and talk to you about the tools your staff use. Nothing in your tenant is changed.
The read-out
A call to walk through it, then the written decision is yours to keep, whether or not you go further. Your IT provider is welcome on the call.
If your files live on a file server or in Dropbox rather than SharePoint, the Check is shorter and says so: AI can only read what's in Microsoft 365. If the free call shows your setup is too simple for three findings, I'll tell you, and the free checklist is your answer.
What it isn't.
So you know exactly what you're paying for, and so your IT provider can see it doesn't overlap with anything they do.
Not a full security review
It looks at what AI can see and reach, not at every security setting you own.
Not a Copilot trial
No licences are bought and nothing is switched on. It tells you what would happen if you did.
Not a roadmap with phases
Four pages and three fixes. If it needs a deck to explain, it's the wrong answer.
About to buy Copilot?
Ask for the Copilot version. Same price, same two weeks, three extra things.
Microsoft's Copilot readiness report
From your own admin centre, read and explained in plain English.
The pilot group I'd start with
Named people, not a headcount.
The exact number of seats to buy
If four seats will do the job, I'll say four, not twenty. The count comes from who actually works in Microsoft 365 all day, not from the size of your staff list.
Price and terms.
- $750
- Up to 25 staff
- $1,200
- 26–50 staff
Canadian dollars, HST extra.
- Paid on signingA fixed price, agreed in writing before any work starts.
- Credited in fullAgainst the AI Guardrails set-up if you go ahead within 90 days. So if you carry on, the Check costs you nothing extra.
- Start datesI take on two new firms a month.
The guarantee, in full. If I can't show you at least three specific things worth fixing (a named file, setting or tool), you don't pay.
The next step, if you want it: AI Guardrails, which fixes what the Check finds. Every price side by side: Pricing. How access and your data are handled: the privacy page.
Guides, in plain English.
Short answers to the questions owners ask first. No email asked. All guides
What can Copilot see in your SharePoint?
Exactly what each person can already open. The trouble is that nobody's checked what that is for years.
What to write when your insurer asks about AI.
Write down what's true, keep the proof, and don't tick a box you can't show. Here's how.
Four Copilot seats, not twenty.
Start with the people whose day is mostly writing, reading and finding things. Then let the usage report decide.
Questions owners ask.
Yours isn't here? Email me and you get a written answer by the next business day.
Microsoft and Fusion do this for free. Why is the Check paid?
Free tools give you a score and a list of recommended actions. The Check reads your actual Microsoft 365, read-only, and tells you the named file, who needs a seat and what to fix first, in writing. If I can't show you at least three specific things worth fixing, you don't pay. And the whole fee comes off the set-up within 90 days.
Why would I give a stranger access to our Microsoft 365?
Read-only, with an end date, and nothing changes during the Check. You get a one-page note on exactly what the role can and can't do, and your IT provider can watch.
We're smaller than 20 people.
You're welcome, at the smaller-firm price ($750 for the Check). At the free call I'll tell you honestly if your setup is too simple for the Check to find three things; then the checklist is your answer, free.
Start with 20 minutes.
No slides, no demo. I'll tell you whether I can help, and what the Check would cost for a firm your size.
DanielI do the work, and I'm who answers.
What happens after you book
- Pick a timeA 20-minute slot, straight from the calendar.
- We talkNo slides, no demo. I’ll tell you whether I can help, and what the Check would cost for a firm your size.
- If it fits, the CheckTwo weeks, read-only, in writing. The price is fixed before any work starts.