Menu
No data was found
Whether you’re a one-person operation or a growing business with a full team, we’re here to help. Get in touch and let’s talk about what we can do for you.
Whether you’re a one-person operation or a growing business with a full team, we’re here to help. Get in touch and let’s talk about what we can do for you.
Microsoft 365 Copilot can only work with what your people can already open. If your SharePoint sites, Teams channels and OneDrive folders are shared more widely than they should be, Copilot will find that content and put it in front of the wrong person in seconds.
Our Microsoft Copilot readiness assessment checks your Microsoft 365 environment before you commit to Copilot licences. We review your licensing, tenant setup, permissions, data governance, security and staff readiness. Then we give you a plain-English report that tells you whether you are ready, what needs fixing first and which users should go first.
It is the Copilot-focused version of our AI readiness assessment for SMEs. It is built for owners and directors of SMEs that already run on Microsoft 365.
A Copilot readiness assessment is a structured review of your Microsoft 365 tenant, carried out before you deploy Microsoft 365 Copilot. It answers one question: if you switched Copilot on for your team tomorrow, would it make them more productive, or would it expose something?
Copilot does not have its own view of your data. It works inside each user’s existing permissions, drawing on email, chats, meetings, files and SharePoint content that the user can already reach. That is the right design, but it means Copilot is only as safe as your permissions are tidy. A file nobody remembered sharing with the whole company becomes something Copilot can summarise for anyone who asks the right question.
A good assessment looks at more than technical readiness or whether you can buy the licence. It checks whether the right data is reachable, whether sensitive data is protected, whether your access controls match how the business actually works, whether your identity and security settings are sound, and whether your staff know how to use Copilot well.
Most small and mid-sized businesses have used Microsoft 365 for years without ever needing to audit who can see what. Folders get shared with “everyone” to solve a problem on a busy afternoon. Guest users are added for a project and never removed. Old sharing links stay live long after the client relationship has ended.
None of that causes much trouble while finding a file means knowing where to look. Copilot changes that. An AI assistant searches everything a user can reach, so forgotten access becomes visible access. That is where most security concerns about Copilot come from, and it is why the first job is to review permissions, not to buy licences.
The most common Copilot readiness issues we see are:
Sites and folders open to the whole organisation, including HR, finance and board content.
Sharing links created years ago that still work.
External users who kept access after a project finished.
Nothing to tell Copilot, or your staff, which content is confidential.
Old versions and duplicates that make Copilot’s answers less accurate.
Gaps in multi-factor authentication or conditional access.
Each of these can turn into data leaks once Copilot is live. Fixing them before you deploy Copilot costs far less than dealing with an incident afterwards. It also means you are not paying for Copilot licences on an annual commitment before your tenant is ready to use them safely.
We assess six areas that together decide whether a Copilot rollout will be safe and worth the investment.
We check every user who might use Copilot has an eligible base licence, such as Microsoft 365 Business Standard, Business Premium, E3 or E5. We also check they have a mailbox in Exchange Online and a provisioned OneDrive, because Copilot relies on both. We will tell you whether the standalone Copilot add-on or a combined licence suits you best, based on your current setup, and which users should have licences assigned first. There is no minimum seat purchase for Copilot, so you can start with a small group rather than licensing the whole business.
It is worth knowing the difference between Microsoft 365 Copilot Chat and the paid Microsoft 365 Copilot licence. Copilot Chat is available to most business users at no extra cost, but it works mainly from the web. The paid licence is what lets Copilot work across your own files, email, chats and Teams meetings, which is exactly why permissions matter so much.
We review your Microsoft 365 tenant, Microsoft 365 Apps update channels (such as Current Channel or Monthly Enterprise Channel), device setup and the apps your team uses every day. Copilot needs supported, up-to-date versions of Word, Excel, PowerPoint, Outlook and Teams to work properly.
This is where most of the effort goes. We review access across SharePoint, Teams and OneDrive, looking for organisation-wide access to sensitive content, broad or anonymous sharing links, and external sharing that no longer serves a purpose. We also check who owns each Team and Microsoft 365 Group, because ownerless groups are where access tends to drift unchecked. Where you have SharePoint Advanced Management, we use its oversharing and data access governance reports to identify the sites holding sensitive files that are open too widely. The aim is to prevent oversharing before Copilot starts surfacing relevant content to the wrong people.
We check whether you have a sensitivity label set, whether it is applied, and whether it reflects how your business actually handles sensitive information such as HR records, contracts and financial data. If you have no labels, we recommend a simple set (for example Public, Internal, Confidential and Highly Confidential) that we can agree with you before any deployment. Applied through Microsoft Purview, labels let you enforce access controls and data loss prevention on your most sensitive content.
We also look at where your data lives. Files scattered across personal drives, email attachments and old file servers are harder to govern. Centralising working files in SharePoint and OneDrive, and removing redundant, outdated and trivial files, gives Copilot a cleaner and more accurate set of content to work from.
We review your Microsoft Entra ID configuration and wider security controls, including user accounts, groups, multi-factor authentication and conditional access policies. We also look at which other AI tools staff are already using, because a sanctioned tool only helps if unsanctioned ones are kept in check.
We look at how your team works today, which roles and workflows would get the most value from Copilot, and who should be in a first pilot group. We use your Microsoft 365 usage data to spot your most active users, because people who already live in Teams, Outlook and SharePoint tend to get value from Copilot fastest. Copilot rewards people who know how to ask for what they need. A small, well-chosen pilot tells you far more than switching it on for everyone. We help you pick users from different roles, agree success measures before the pilot starts, ask pilot users to test the permission boundaries on purpose, and gather feedback on where Copilot saves time. Some guides suggest 20 to 50 pilot users for a medium-sized business. For most SMEs we start smaller, often with a single team.
If you want to look before you book, there are three things you can check yourself in the Microsoft 365 admin centre.
In the Microsoft 365 admin centre, go to Reports, then Usage. Open the Readiness view under the Microsoft 365 Copilot section of the usage reports. It shows which users meet the technical and licensing prerequisites, such as an eligible base subscription, and lists suggested candidates for a pilot based on their usage metrics.
In the SharePoint admin centre, check whether external sharing is set to “Anyone” and how many sites allow organisation-wide access.
In Microsoft Entra ID, list your guest accounts and ask whether each one still needs access.
The Microsoft readiness report tells you whether users can have Copilot. It does not tell you whether it is safe for them to have it. That second question is what our assessment answers, and it is the most important step in your Copilot journey.
We start with a short call to understand your business, how many people would use Copilot and what you hope it will do. We will tell you honestly whether an assessment makes sense for you right now.
We carry out the Copilot readiness assessment over roughly three to five business days. That covers the technical review of your tenant, a permissions and data governance review, and short conversations with key staff.
You receive a written report that covers:
A clear verdict on whether you are ready for Copilot, the oversharing and security risks we found (ranked by severity), the licences you need, a prioritised action plan, a recommended pilot group and the use cases most likely to pay off.
We talk you through the findings, answer your questions and agree what happens next. There is no obligation to use us for the remediation or deployment work.
Most businesses need some work before Copilot is switched on. The report and action plan document exactly what, so you can secure your environment yourselves, with your current IT provider or with us.
If data security is the main gap, our AI Security Pack is designed to close it. It helps you find and control overshared content, classify and protect sensitive data, back up your Microsoft 365 data, and block AI tools your business has not approved. It also includes Copilot training for your team in the first year.
When you are ready to deploy, our AI implementation services cover the Copilot rollout itself, from licence assignment and configuration through to onboarding, prompt coaching and ongoing support.
This assessment suits you if:
If you are still deciding whether AI fits your business at all, or you are weighing Copilot against other AI tools, start with our broader AI readiness assessment. You may also find our guide to the best AI tools for small business useful.
We are a Microsoft 365 managed service provider working with SMEs across the UK. We manage Microsoft 365 tenants every day, so we know where permissions drift and where data ends up in places it should not.
We do not switch Copilot on cold for any client. Every deployment we run starts with a readiness review, an agreed sensitivity label set and an agreed policy on which AI tools are allowed. The assessment you buy is the same gate we use ourselves.
The assessment is a paid, fixed-price engagement, priced by the size of your business. We confirm the price on your discovery call before you commit to anything. The discovery call itself is free.
For most SMEs the audit takes three to five business days, depending on the size of your tenant and how many sites and users you have. Large enterprises with complex structures can take months, but that is rarely the case for a business of your size. You receive your report shortly afterwards.
No. We recommend you do not. The assessment tells you whether you are ready and which users should be licensed first, so you avoid committing to annual licences you cannot use safely yet.
Copilot oversharing is when Copilot surfaces content to a user who technically has access to it but should not. It is not a flaw in Copilot. It is the result of permissions that were too broad before Copilot arrived. Fixing permissions and applying sensitivity labels is the cure.
No. Microsoft’s readiness report in the admin centre checks licensing and technical prerequisites. Our Microsoft Copilot readiness assessment also covers permissions, oversharing, data governance, security and staff readiness, and gives you a prioritised plan to fix what we find.
Yes. Staff readiness is part of the assessment, and if you go ahead we can run Copilot onboarding and prompt coaching for your team as part of deployment. For structured training beyond that, our Let’s Copilot training platform helps your staff build the skills to use Copilot well.
Find out whether your Microsoft 365 environment is ready for Copilot before you spend on licences. Book a free discovery call and we will talk through your setup, what the assessment would cover for your business and what it would involve.
A practical guide to the AI tools worth paying for, starting with the ones already in your Microsoft 365 or Google Workspace, and what to check before you roll them out.
Work through our 16-question checklist covering data, security, people, processes and governance, and see clearly what’s ready, what needs attention and what to tackle first.
Get an assessment that checks your Microsoft 365 environment and tells you exactly what needs fixing before you invest.
This guide explains where to start, what to prioritise, and how to avoid wasting budget on AI tools that don’t deliver measurable business outcomes.
A structured review of your data, technology, culture, and strategic goals broken into the foundations every SME needs to get right before adopting Microsoft Copilot or any AI tool.