Data & AI Readiness

Make your data safefor AI before AIfinds it.

Copilot, Gemini and ChatGPT can surface anything a person has access to, and staff paste data into AI tools nobody approved. We find what is exposed, fix it, and prove the improvement with a score.

Microsoft 365 or Google Workspace · any AI tool your staff use

Scope my AI Exposure Assessment

Demonstration · Northbeam (fictional)

A new starter asks the company AI assistant

AI assistants respect permissions. The problem is the permissions themselves.

The problem

Most data was never ready for this.

63%

Not sure their data is ready

Organisations that lack, or are unsure they have, data practices fit for AI.

Fully Copilot-ready

IT service providers surveyed who said all their clients' Microsoft 365 tenants were ready for Copilot.

47%

Exposure or near miss

Organisations that had seen an AI-related data exposure or near miss in the past year.

Sources: Gartner, 2025; IT Brief Australia, 2025.

Five steps from exposed to trusted

Start with the assessment. Scope the rest from what it finds.

Request a fixed quote

Start here

AI Exposure Assessment

We find what your AI tools would expose today, and which AI tools staff already use. A readiness score out of 100, redacted examples of what any employee could ask and see, the top risks with evidence, and a costed fix plan.

2 to 3 weeks

Secure & Prepare

We clean up sharing and permissions, label sensitive data, remove leavers and stale guests, set rules for approved AI tools, then roll your assistant out to a pilot group. We finish by re-running the assessment so you can see the score move.

4 to 8 weeks

Data Map

We map the data in your core systems, who owns it and how good it is, then clean up what matters most.

3 to 6 weeks

One Source

One trusted set of numbers for leadership: a modern data warehouse fed from your core systems, sensitive fields masked, and the reports people actually use.

6 to 12 weeks

Data Care

A monthly re-scan and score, with drift fixed as staff, files and tools change.

Monthly

Fixed fee for each step, quoted within 3 business days. See the Collate AI Readiness Model

Copilot Readiness Check

How ready are you?

Ten questions, two minutes. You get an indicative score, your readiness band and the two areas most likely to be weak. Nothing is sent anywhere.

The rule that overrides the score

Any finding that exposes salary, health, credential or board data blocks rollout, whatever the total.

How we work

AI enablement, not audit.

Read-only first

The assessment changes nothing. Fixes come from an approved list, tested on a pilot group, each with a rollback step.

Your data stays with you

Reports contain redacted examples only. Working files are deleted 90 days after delivery.

Measured

Every Secure & Prepare project ends with a re-score against the same model.

Certified people

Led by a certified security and data specialist, with engineers matched to your environment.

Independent

We do not resell licences or software, so our advice has no angle.

Questions

Asked before every rollout.

We have not bought Copilot yet. Is this still useful?

Yes. It is the best time, because you can size licences and fix exposure before anyone has the tool.

Is this only for Microsoft 365?

No. We assess Microsoft 365 with Copilot and Google Workspace with Gemini, and every assessment covers the other AI tools your staff use, such as ChatGPT and Claude.

Do you sell licences?

No. We do not resell software, so our advice is independent.

How long before we see results?

The score and the worst exposures are in the read-out at the end of week 2 or 3. Urgent exposures are reported the day we find them.

Get in touch

Clarity before commitment.

Tell us what you are working on. It takes two minutes, and we reply within one business day.

contact@collatenow.com.au

Start with
a brief

Collate. Independent technology advisory.

Collate Pty Ltd · ACN 702 564 823 · Adelaide, South Australia. Collate provides technology assessments and data services. We do not provide legal, tax, financial or investment advice, and we do not advise on the price of any transaction or whether to proceed. Cyber risk assessments are not a guarantee against attack and are not insurance advice.