Professional services
Professional services: implement and integrate.
Our engineers put the design into your environment and hand over a documented, working result.
Professional services turn a roadmap into running systems: identity and PAM platforms, cloud posture tooling, data classification and privacy processes, an ISMS, the Fidempli platform and AI guardrails. We work in your environment, with your teams and under your change process.
Service domain 1
Cybersecurity
What we implement in this domain
- Identity platform and PAM rollout
- Cloud posture tooling
- ISMS build
Professional services in each service
- Cloud Security
We implement secure configurations, integrate security testing into your delivery pipeline and support migrations in your environment. - Identity & Access Management
We roll out and integrate your identity platform, including identity governance, data access governance and custom connectors. - Privileged Access Management
We roll out and integrate your PAM platform: vault, rotation, just-in-time elevation and session recording. - Security Strategy & GRC
We build the ISMS with you: policies, risk register, Statement of Applicability, processes and audit preparation.
Service domain 2
Data Protection & Privacy
What we implement in this domain
- Data discovery and classification, e.g. Microsoft Purview
- Data subject request and consent processes
Professional services in each service
- Privacy Programme (GDPR and APPI)
We set up the processes: data subject requests, consent management, breach handling and processor contracts. - DPIA & Privacy by Design
Our engineers build the safeguards into your systems, such as sensitivity labels, data loss prevention, access control on RAG sources and pseudonymisation. - Data Discovery & Classification
We implement data discovery, sensitivity labels, DLP and retention, for example in Microsoft Purview, and fix oversharing. - External Data Protection Officer
We set up what the DPO role relies on: records, processes for rights requests and breaches, and DPIA templates.
Service domain 3
AI Security & Governance
What we implement in this domain
- Fidempli platform implementation
- AI guardrails
- ISO/IEC 42001 management system build
Professional services in each service
- AI Readiness Assessment
Where a finding needs a quick fix, such as blocking a risky AI app or tightening Copilot sharing settings, our engineers implement it in your environment. - EU AI Act Compliance
Our team implements intake, oversight, logging and documentation in your environment, including Microsoft 365 and the AI platforms you use. - AI Risk Management & ISO/IEC 42001
We build the framework, policies, controls and records with your teams and take you through internal audit to certification. - AI Security & Red Teaming
Our testers run the red teaming in your environment, and our engineers implement fixes, guardrails and permission changes with your teams.
Platform Implementation
The platform connected to your environment, with your policies, intake and guardrails live.
- Plan and scope
We agree the connectors, policies, workflows and rollout order with your IT, security, privacy and business owners.
- Install and sign-in
We set up your tenant and single sign-on with your identity provider, and assign roles for administrators, reviewers and owners.
- Connect your sources
We connect Microsoft 365, Entra ID, Defender and Purview, plus OpenAI, Anthropic, Google and AWS, using the least privilege each connector needs.
- Configure policies and intake
We configure your AI policy, risk tiers, intake form and approval routes, and import any existing AI register.
- Set up guardrails
We set guardrail rules for personal, health and confidential data, test them with your users and agree the thresholds for human oversight.
- Hand over and train
We train your administrators and reviewers and hand over a documented configuration.
What you get
- Implementation plan and connector scope
- Configured tenant with single sign-on and roles
- Live connectors to your identity, security and AI providers
- AI policy, risk tiers, intake form and approval routes in the platform
- Tested guardrail and human oversight rules
- Configuration documentation and administrator training
AI automation in this service
- Automated connector health checks that flag missing permissions or failed syncs during setup.
- Automated import and de-duplication of existing AI registers and spreadsheets into the inventory.
- Automated test runs of guardrail rules against sample prompts before they are switched on.
How an implementation runs
- Plan
We agree scope, design, rollout order and how changes are approved in your environment.
- Build
We configure, integrate and test in your environment, with least-privilege access that you approve.
- Roll out
We go live in waves with your users and adjust based on what we learn.
- Hand over
You get documentation, training and runbooks, or we move straight into managed services.
Frequently asked questions
Do you work with our existing tools?
Yes. We implement on the platforms you already run where they fit, and help you choose new ones where they do not.
Who gets access to our systems?
Named engineers, with the least privilege the task needs, approved by you and logged. Access is removed when the work is done.
Can our team take over after go-live?
Yes. Every implementation ends with documentation and training. If you prefer, we run it for you as a managed service.
Do we need a consulting project first?
No. If your requirements and design are already clear, we start with implementation.
When can we start?
The platform launches in December 2026. Design partners get early access before launch, and we can plan scope, policies and connectors with you now.
Which systems can you connect?
Microsoft 365, Copilot Studio, Entra ID, Defender for Cloud Apps and Purview, plus OpenAI, Anthropic, Google and AWS. We agree the exact scope in the planning step.
Consulting · Professional services · Managed services
Start with a 30-minute AI risk conversation.
A senior consultant replies within one business day. Or join the 3–5 design partners shaping the platform before launch.