AI Governance and Support: Keep AI Governed as It Grows

AI platforms change every week, staff find their own AI tools and agents multiply. This monthly service holds the baseline set at AI Foundation and shows you what AI is in use and what it can reach.

Start an AI Assessment Talk to an AI Expert

Service: Monthly
Platforms: Microsoft 365 Copilot, Claude or ChatGPT
Starts: At AI Foundation go-live
Reads: Settings, never content

What Happens After Go-Live

Settings DriftSettings and connectors change, usually with good intent and rarely with a record.

The Platform MovesVendors ship new features and controls constantly, switched on with their defaults.

AI You Didn't ApproveStaff paste company data into free AI apps and browser extensions.

Agents Nobody Is WatchingEasy to create, easy to forget, often with more access than the job needs.

Shadow AI and agents

Shadow AI and Agent Sprawl, Brought Into View

Shadow AI is any AI used without your organisation's approval: a free chatbot account, a browser extension, an agent nobody owns. Left alone, it spreads. We keep every AI tool and agent in view, with what each one can reach.

Shadow AI DiscoveryThe AI apps in use, who uses them and how risky each vendor is.
Agent RegisterEvery agent, its owner, what it can reach and what it's allowed to do.
Access Kept to the JobExcess agent access flagged and reduced before it causes damage.
Sprawl ControlOwnerless and unused agents retired, and new agents approved before go-live.

AI Governance report · Shadow AI and agents

14AI apps in use

3New this month

23Agents

Agent	Owner	Can reach	Action
HR Policy Assistant	People and Culture	HR site	OK
Invoice Matcher	Finance	Finance system, email	Review access
Untitled agent	No owner	All of OneDrive	Retire

Every month

Five Things We Do for You

MonitorSettings, shadow AI and agent activity checked against the agreed baseline, with alerts when something changes.

CorrectDrift returned to the baseline, with notice to you before and after.

ReportA plain-language report on adoption, licences, spend, exposure, shadow AI and agents.

MaintainA quarterly review of new vendor controls, with the right ones put in place.

AdviseA named contact who knows your environment, plus support hours each month.

We Watch the Settings, Not Your Content

We read configuration, usage, licensing and agent activity. Never your documents or your staff's conversations, and every change can be audited in your own platform.

OneNet holds ISO 27001 certification. OneNet AI's ISO 27001 certification is pending.

Work We've Delivered

Enterprise IT team

Approved AI, With IT in Control

Staff gained approved AI tools while IT kept visibility, access control and compliance.

Challenge: Staff were using public AI tools on personal accounts, creating governance and security concerns.
What we did: Deployed ChatGPT Enterprise, Claude and Gemini with Microsoft Entra ID single sign-on and central administration.

AI Governance Questions

What is shadow AI?

Shadow AI is any AI tool used without your organisation's approval or oversight, such as a free chatbot account, a browser extension or an agent nobody owns. Company information shared with it leaves your control.

What is agent sprawl?

Agents are easy to build in Microsoft 365 Copilot, Claude and ChatGPT. Without a register and owners, they multiply across teams, each with its own access. We keep a register, reduce excess access and retire agents nobody needs.

Do you read our documents or conversations?

No. The service reads configuration, usage, licensing and agent activity data only.

When does it start?

At AI Foundation go-live. It maintains the baseline AI Foundation delivers.

Start With a Clear Picture

The Free AI Assessment shows how your AI is configured today, what shadow AI is in use and where the gaps are.