TULLIO·IT

Tullio IT / Govern / AI Platform Governance

Govern · Fixed fee

AI Platform Governance

Your people are already using AI. The question is whether anyone decided what it can see, who can build with it, and what it costs. An independent governance review and rollout plan for Microsoft 365 Copilot, Copilot Studio, Power Platform, Claude, ChatGPT and Grok, signed by the executive who designed the governance framework it runs on.

Book a 20-minute call All offers

Who it's for

Companies rolling out Microsoft 365 Copilot or an enterprise AI platform, or already using one without written rules for it.

When to call

  • Copilot licenses are bought, or about to be, and nobody has checked what it will surface
  • Staff are building agents or custom GPTs and nobody approves them
  • Your insurer, auditor, lender or a customer asked how you govern AI
  • The AI bill is growing and nobody can say which team is spending it
  • People are pasting company data into tools nobody approved

What gets checked

Evidence, not opinion.

The data

What the AI can reach. Copilot respects existing permissions, so if a SharePoint site is open to everyone, Copilot will surface it to everyone. An oversharing review finds the exposure before rollout, and the highest-risk sites get fixed first.

The platforms

Environment strategy, data loss prevention policies and Managed Environments for Power Platform; publishing and approval controls for Copilot Studio agents; identity, provisioning, roles, approved connectors, retention and audit settings for Claude, ChatGPT and Grok.

The controls and the cost

Sensitivity labels, DLP and audit logging in Microsoft Purview; who holds which admin role; licensing, consumption and billing controls so the spend is visible before the invoice is.

What you get

Written down, and signed.

  1. An inventory of every AI platform, agent and connector in use, with an owner for each
  2. A ranked list of data exposures, with the first fixes done or assigned
  3. A governance standard: who can use, build, approve and publish, and how
  4. A rollout plan in phases, from pilot group to company-wide
  5. The evidence auditors and insurers ask for, mapped to the NIST AI RMF and ISO/IEC 42001
FeeFixed fee, from $3,500.
TimingThree to four weeks from kickoff to signed standard.

Independent by design

Nothing to resell.

Tullio IT sells no hardware and no leases, marks up no software, and takes no referral fees from any provider it reviews. It never audits a service it provides.

Get in touch

Tell us what's keeping the systems, or the board, up at night.

A short conversation is the fastest way to know if there's a fit. No deck, no pitch. Just a direct read on the problem.

Book a 20-minute call hello@tullioit.com 312-285-0508