Accipa
Start with a free 20-minute call

AI Guardrails: fixed in a month, checked every month.

I fix the three or four things that make AI risky in your Microsoft 365, write rules your staff can actually follow, and check every month that nothing's drifted. Got a question about a new tool? Email me. You'll have an answer the next business day.

A tear-off desk calendar showing the 1st, on a light oak desk.

The set-up month.

Three to four weeks, working from what the AI Exposure Check found. Seven things, in plain words.

  1. The oversharing fixed

    On the sites and libraries AI will read: links open to the whole firm removed, broken permissions repaired, and the most sensitive sites hidden from Copilot's search.

  2. Your files sorted

    What moves into SharePoint, and what stays out and is therefore invisible to AI, written down so nobody has to guess.

  3. A one-page AI-use policy

    Rules your staff can actually follow: which tools are approved, what never gets pasted in, and a person reviewing anything that goes to a client. Mapped to your own obligations: privacy law, your professional body if you have one, and your insurer's questionnaire.

  4. The model decision, applied

    Whichever way you decided on the AI models inside Copilot, set in the admin centre, along with Microsoft's recommended Copilot settings where you agree.

  5. Every account locked properly

    Multi-factor sign-in checked and closed for every account. A stolen account with Copilot can summarise everything it reaches, so this is the one security item that is truly about AI.

  6. Labels on the confidential libraries

    Sensitivity labels on the places that hold salaries, client contracts and board papers, where your Microsoft 365 plan includes them.

  7. A dated before-and-after page

    What was reachable by whom when I started, and what is now. One page you can hand to an insurer, a client or a partner.

Then, every month.

From month two, about two hours of my time a month on your tenant, and one page on the 1st that tells you what happened. Most months it ends with "nothing to do on your side".

Monthly report · November 2026
Example Firm LLP

November, in one page: two new sharing links to 'Everyone' (removed), one new app asked for access to your mailboxes (a note-taker; I've said no until you decide), and Microsoft changed a Copilot setting I've turned back. Nothing to do on your side this month.

What changed

  • Two new sharing links to “Everyone”Removed
  • A note-taker app asked to read every mailboxWaiting for you
  • A Copilot setting changed by MicrosoftTurned back

Checked on the 1st

Accounts with MFA
22 of 22
Leavers switched off
1 of 1
Copilot seats in use
4 of 4
Files open to everyone
0
Checked and written on 1 December 2026. Questions: reply to this email; a written answer by the next business day.
Example data · a monthly report for a made-up firm

What the monthly covers.

  1. A drift check, on the 1st

    New links open to everyone, new sites, new admins, gaps in multi-factor sign-in, new AI apps given access, new agents, and anything Microsoft changed that month. One dated page.

  2. New tools, reviewed

    "Can we use this note-taker?" Ask by email and get a written answer by the next business day.

  3. The policy kept current

    Updated when Microsoft or your firm changes something, so the page on the wall stays true.

  4. A licence check

    Who uses Copilot, who doesn't, and which seats to cancel. This is where "four seats, not twenty" stays honest after month one.

  5. A quarterly session

    Forty-five minutes every three months on one question: what should AI do for us next?

  6. Answers in writing

    Anything about AI and your Microsoft 365, answered in writing by the next business day. I answer, and I'm who fixes it.

You don't have to fire anyone.

Most firms I work with already have an IT provider, and that's fine. They keep your devices, your help desk and your backups. I keep AI safe inside your Microsoft 365 and tell you both what changed each month. If you don't have anyone, I'll say so and we can talk about it.

Exactly who does what, beside your IT provider

Your IT provider keeps

  • Laptops, phones and printers
  • Day-to-day fixes for your staff
  • Backups, servers and the Wi-Fi
  • Anything after hours

I keep

  • What AI tools can see in your Microsoft 365
  • The one-page AI-use policy
  • The model decision inside Copilot
  • The monthly check that nothing drifted

One page on the 1st of every month, to you both

What it isn't.

Written down so the plan never overlaps with what your IT provider already does.

  • Not your devices or your backups

    Laptops, printers, servers and backups stay with your IT provider, or with whoever looks after them now.

  • Not after-hours cover

    Written answers by the next business day. If something is on fire at midnight, that's your IT provider's call.

  • Not a security operations service

    Nobody is watching your network around the clock. The monthly check looks at what AI can see and reach.

  • Not a Copilot licence

    You buy licences from Microsoft, or through me at the same price. Either way the advice is the same.

Price and terms.

From$2,500
Set-up
From$375
Then, a month

The exact price for your firm size is confirmed at the free call and fixed in writing before any work starts. HST extra.

  • The set-up, in two halvesHalf on signing and half when you get the before-and-after page. The Check's fee comes off the first half.
  • The monthly, in advanceBilled by pre-authorized debit or card.
  • No minimum termEither of us can stop with 30 days' notice.

The guarantee, in full. After the set-up month, if you don't want the monthly plan, keep everything (the fixes, the policy, the before-and-after page) and owe nothing further.

Every price side by side: Pricing. Once the set-up is done, AI can do real work for you: the three builds.

Guides, in plain English.

Short answers to the questions owners ask first. No email asked. All guides

Questions owners ask.

Yours isn't here? Email me and you get a written answer by the next business day.

Why pay monthly?

Because Microsoft changes something every month, someone shares a folder with "Everyone" every month, and you'll have a tool question every month. You get one page, one person, and an answer by the next business day. No minimum term; cancel any month.

We already have an IT provider.

Good, keep them. Most firms I work with already have an IT provider, and that's fine. They keep your devices, your help desk and your backups. I keep AI safe inside your Microsoft 365 and tell you both what changed each month. If you don't have anyone, I'll say so and we can talk about it.

Where does our data go?

Everything runs in your own Microsoft 365; I host nothing. Copilot stores your data in Canada and processes it elsewhere until Microsoft's announced 2027 date, and some models inside Copilot are on by default. I write that down as a decision you make, in plain English, not a promise I can't keep.

Do you sell Microsoft licences?

Yes. Accipa resells Microsoft licences, and Microsoft pays resellers a margin, about 10–15% [Estimate]. I'll tell you that up front. I'll also still tell you to buy four seats, not twenty: the licence check is in your monthly report, and the day-60 right-sizing on every Copilot rollout is in writing. If you'd rather buy from Microsoft directly, the price is the same and the advice doesn't change.

Start with 20 minutes.

No slides, no demo. I'll tell you whether I can help, and what the Check would cost for a firm your size.

Start with a free 20-minute callor email me

DanielI do the work, and I'm who answers.

What happens after you book

  1. Pick a timeA 20-minute slot, straight from the calendar.
  2. We talkNo slides, no demo. I’ll tell you whether I can help, and what the Check would cost for a firm your size.
  3. If it fits, the CheckTwo weeks, read-only, in writing. The price is fixed before any work starts.
Start with a free 20-minute call