Before Copilot and AI agents start reading everything, find out where your sensitive data really lives. We discover it, label it, lock it down and hand you the evidence your board and auditors ask for.
An enterprise data-governance service that finds sensitive data, labels it and moves it somewhere safe, before AI tools, copilots and agents can expose it. It also covers data readiness: audit, classification and quality checks so your business is ready before using AI.
The service supports alignment with these frameworks. It does not constitute certification, which remains with accredited certification bodies.

Structured sources and unstructured data (file shares, SharePoint/OneDrive, Google Drive, email archives, S3/Blob) for critical data elements.
Sensitivity labels for PII, financial, health, IP and credentials, synced with Microsoft Purview.
Move sensitive items to secure locations with access controls, retention rules and a full audit trail.
AI system inventory, risk register, impact assessments, policy library and shadow AI discovery.
ISO/IEC 42001, ISO/IEC 27001, NIST AI RMF and NIST CSF, supporting Privacy Act and APP alignment.
Dashboards for the board, CISO and DPO, and evidence packs for auditors.


Find and fix over-shared files before Microsoft Copilot or any AI assistant can surface them to the wrong people.
See which AI tools staff already use, what data goes into them and which ones need an approved alternative.
Short, plain-English AI use rules mapped to ISO/IEC 42001 and the Privacy Act, with training attached.
One evidence pack showing risks, controls and ownership, ready for auditors, insurers and directors.
Watch how sensitive data is discovered, labelled, locked down and reported. Each step lights up as it runs.
We choose what fits your risk and budget rather than locking you into one vendor.
Timelines depend on scope and access to your systems. Your fixed-scope plan confirms exact dates.
CISOs, CIOs, DPOs, risk and compliance leaders preparing for Copilot or AI roll-outs, and organisations facing audits.
Each plan has a one-time setup fee and a monthly subscription covering hosting, monitoring, updates and support. Pay annually and get 2 months free.
Sole traders, consultants and small teams
SMEs and growing teams
Large, multi-team or regulated organisations
All prices in AUD and exclude GST. Enterprise is “from” pricing; a scoped quote follows discovery. Third-party licences are billed at cost plus handling. Minimum term 12 months for monthly subscriptions.
We listen, review your context and agree the goals. No obligation.
A clear scope, plan and price you can take to your team.
We deliver in short cycles with your team in the loop.
Go live, monitor, and keep improving under your SLA.
No. The service supports alignment with these frameworks but does not constitute certification. Certification remains with accredited certification bodies.
Structured sources and unstructured data such as file shares, SharePoint/OneDrive, Google Drive, email archives, S3/Blob and chat exports.
No. We use it where you already license it, and lighter tools or manual processes where you do not.
A first readiness report typically takes two to four weeks, depending on how many systems are in scope.
Book a free consultation. No obligation, response within 24 hours.
