MIP Foundation

---

What’s included

The Foundation tier is governance, monitoring, license management, and a foot in the door of workflow automation. It is the tier you want when you know you have AI happening, you know you don’t have a grip on it, and you want it documented and controlled inside ninety days.

• AI Acceptable Use Policy, customized to your business, your industry, and your insurance carrier. Reviewed quarterly.
• Shadow AI monitoring — Microsoft Defender for Cloud Apps (or an equivalent your tenant supports) configured to flag unauthorized AI traffic. Monthly report.
• Microsoft Copilot license management — administration, utilization reporting, license rightsizing recommendations. We tell you when to cut licenses, not just when to add them.
• Monthly governance check and drift report — five-page summary, sent on the first business day of each month, covering what changed, what’s at risk, what to act on.
• Quarterly AI Business Review (compressed) — 45-minute meeting, two-page deliverable. The full ABR format is in Operate.
• Help desk access for AI questions — your team can ask “is this safe to use on this data” and get an answer from a named human inside one business day, not from a chatbot or a generic policy PDF.
• Prompt library access — vertical-specific prompts (professional services or manufacturing) deployed into your Copilot or Teams. Versioned. Updated.
• One agent or workflow per quarter from the standard library — a deployed, working workflow from the prompt and agent library. Not custom — picked from the catalog, configured for your data.

What’s not included

Foundation has a stop. We name it on this page so you don’t find it later in a contract.

• Custom agent or workflow development. If the workflow you need is not in the standard library, you’ll need a Custom Agent Sprint ($32,000 per sprint) or you’ll need Operate, which includes custom builds.
• Vendor evaluation outside the approved registry. We evaluate AI vendors as part of our practice; that work informs the registry. Adding a specific new vendor at your request is a project-based engagement.
• Dedicated AI advisor time. Foundation includes help desk access, not standing 1:1 advisory. That lives in Operate and Strategic.
• Compliance program build-outs. CMMC, HIPAA, SOC 2, ISO program-level work is scoped per engagement, separate from Foundation.

What the first 90 days look like

Days 1–7. Onboarding kickoff (90 min). Account setup in our systems. M365 / Google Workspace admin handoff. Shadow AI monitoring deployed. Help desk channel opened.

Days 8–21. AUP drafted, reviewed with your leadership, signed off. Approved Tool Registry assembled — the AI allowlist for your business. Prompt library deployed for your vertical. First training email to staff.

Days 22–45. First shadow AI scan complete. First drift report delivered. Copilot license utilization baseline established. First standard agent deployed from the library (you pick which one; we deploy and train).

Days 46–75. First incident response playbook tabletop with your IT lead and HR. License rightsizing recommendations delivered. Training rollout for end users — Copilot basics, the AUP, the “is this safe” decision tree.

Days 76–90. First compressed Quarterly AI Business Review meeting. The math: what we deployed, what got used, what was avoided. Roadmap for the next quarter.

Step up to Operate when…

You’ll know it’s time. Three signals we see in clients:

• You’re requesting custom workflows monthly. Foundation pays for one quarterly. If the gap is the constraint, Operate’s custom build allocation removes it.
• You’ve outgrown the standard prompt library. Your associates or estimators are bumping into the same edge cases the library doesn’t cover, and you want them solved instead of worked around.
• Leadership wants AI in three or more departments. Foundation is right when AI is starting; Operate is right when AI is operating across functions and you need an assigned analyst, not a help desk.

Book an AI Readiness Assessment

Three weeks. Fixed fee. A real report and a 90-day roadmap. You keep it whether you hire us or not.

Book an AI Readiness Assessment · Or talk to us for 15 minutes — no pitch.