Short answer
Assess AI governance in one pass across every tool rather than one product at a time. Inventory which AI tools are in use, confirm they sit behind company identity and SSO, check what data each tool can reach, pull usage evidence from each vendor's admin reporting, and score the results against a fixed control set. Accred Assess does this read-only for Microsoft 365, Copilot, Claude, ChatGPT and coding agents against 67 controls, free to start.
Key facts
- Most organizations already use more than one AI tool, often including personal accounts outside IT control.
- Company identity and SSO for AI tools is the control that makes offboarding, auditing and data rules enforceable.
- Microsoft 365 Copilot inherits Microsoft 365 permissions, so data exposure starts with SharePoint and OneDrive sharing.
- Claude and ChatGPT business plans offer admin and usage reporting that can serve as governance evidence.
- Accred Assess reads Microsoft Graph, the Anthropic Admin API and ChatGPT analytics imports, and marks anything it cannot read as not evaluated.
Start with an inventory
List the AI tools in use, who uses them, and whether they are company accounts or personal ones. Include coding assistants used by developers. Sign-in logs, expense reports and a short staff survey usually surface the real list.
Check identity, data and evidence
For each tool, confirm it uses company identity with SSO and MFA, that access is removed when people leave, and that data rules are clear: what may be pasted in, what the vendor retains, and whether the tool is connected to company data. For Copilot, review SharePoint and OneDrive oversharing and sensitivity labels. Then collect usage evidence from each admin console so decisions rest on facts.
Score it against one control set
A single control set makes progress measurable and comparable across tools. Accred Assess, a free read-only web assessment from Accred Consulting at assess.accredconsulting.com, scores 67 controls across 12 phases and keeps a decision history for each control. The expanded report, $99 per organization, adds framework alignment and a print-ready report with methodology and limitations.
How Accred Consulting approaches it
Accred Consulting helps organizations move from scattered AI use to a governed rollout. The assessment results feed a scoped proposal with a fixed price and timeline. US-based specialists then set up SSO and identity for AI tools, data handling rules, Copilot data readiness and an acceptable use policy, with documentation and knowledge transfer at handover.
Track record: 475+ client projects, 2,000+ migration workstreams and 210,000+ users migrated by a US-based team. Company facts · Case studies
Related questions
Want this scoped for your environment?
Book a free consultation. After discovery you get a written plan with scope, a fixed price and a timeline.
Book a free consultation