Microsoft 365 Copilot implementation. Big ambition, bite-sized delivery.
The main reason most Copilot implementations fail is that the first step appears too big. Someone purchases the licences, turns it on for everybody and then sits around waiting for the productivity results to start flowing. They never come. We've divided the Copilot implementation process into 6 easy-to-tackle steps.
The licence is the easy part
Even though Microsoft 365 Copilot hit 30 million paid seats in July 2026, the situation in businesses remains the same. Some employees use it daily, others have tried it twice, and nobody knows how much value it has delivered. According to Gartner, 40% of organisations postponed their Copilot deployment for 3 months or more due to oversharing concerns, while 64% said information governance and security took significant time and resources.
That is not a Copilot problem. It is a question of preparation. Copilot will never show users information they are not permitted to access, which is why SharePoint sites, old HR files, and "Everyone" links need to be reviewed before implementation. Fix those issues first, and Copilot is much safer. Ignore them, and you give your employees a search engine for your mistakes.
Start small. Prove value. Scale securely.
- 01
Assess
We map how your business works today: data, access, licensing, security posture and where time is being lost. You get a written Copilot readiness report with a prioritised fix list. Typically 2 to 3 weeks.
- 02
Prioritise
Together we agree a shortlist of departments or use cases with clear, measurable value. Fee earners drafting client letters, consultants summarising calls, finance teams building board packs. You own the priorities; we shape the plan.
- 03
Prepare
We clean up and secure the SharePoint sites, folders and knowledge sources Copilot will use, before it uses them. Oversharing is fixed, sensitivity labels are applied where they matter, and Restricted Content Discovery hides anything that should never surface in an AI answer.
- 04
Pilot
A defined group, real scenarios, a 4 to 6 week window. We measure time saved and quality of output against a baseline, and the results become your business case rather than a vendor slide.
- 05
Adopt
Role-based training and practical prompt libraries built around your actual work, so Copilot becomes part of the day rather than a novelty. We train champions inside each team and give leadership a usage dashboard.
- 06
Expand
Roll out to the next priority area, then move on to automation and AI agents with confidence, because the governance is already in place.
Most firms reach a measured first rollout in 8 to 12 weeks. The readiness assessment is the only stage you have to commit to up front.
Everything a Copilot rollout needs, nothing it doesn't
- Copilot readiness assessment and written report
- Prioritised adoption roadmap
- Permissions and oversharing clean-up for priority areas
- Sensitivity labels and data loss prevention configured for Copilot
- A measured pilot group with baseline and results
- Role-based user training and prompt libraries
- Governance and AI risk sign-off recorded alongside your security risk register
- A clear, costed plan to scale
Copilot only sees what your people can see. We make sure that's the right things.
Copilot for Microsoft 365 operates in your Microsoft 365 ecosystem. Prompts, responses and files used by Copilot are not included in the training data of Microsoft's foundation models. Your responsibilities for protecting enterprise data across emails and documents remain the same when using Copilot. Data continues to be governed by your existing Microsoft 365 data residency arrangements.
The issue isn't Microsoft 365 Copilot itself, but the permissions already in place across your organisation. Copilot respects existing access permissions, meaning that anything a user already has permission to access can potentially be surfaced by Copilot in seconds. As part of our readiness assessment, we use Microsoft Purview's data security posture capabilities to identify oversharing before Copilot is deployed. We also use Restricted Content Discovery to restrict access to sites containing information that should not appear in AI-generated responses.
For more comprehensive governance, including shadow AI detection and the development of an AI acceptable use policy, we cover these areas through the Control workstream of our AI Enablement service offering.
AI governanceWhat Copilot actually costs in the UK
- £23.10Microsoft 365 Copilot, per user per month, annual commitment paid yearly
- £16.10Microsoft 365 Copilot Business, up to 300 users (£13.80 first year until 31 Dec 2026)
- £0Microsoft 365 Copilot Chat, included with eligible Microsoft 365 subscriptions
Microsoft UK list prices, ex VAT, last checked 9 November 2026.
Microsoft publishes its UK prices on their website, so there is no need to be vague about them. Microsoft 365 Copilot, the full version available to organisations of any size, costs £23.10 per user per month with annual billing, or £24.26 with monthly billing. Microsoft 365 Copilot Business costs £16.10 per user per month, with a promotional price for the first year of £13.80 till 31 December 2026. Microsoft also offers Business Standard with Copilot for £18.10 and Business Premium with Copilot for £24.60 per user per month. All prices exclude VAT and were correct on 9 November 2026.
From 1 December 2026, Copilot can be purchased separately from the qualifying Microsoft 365 base plan, which removes one of the licensing hurdles that got organisations into trouble in 2025.
You don't need a paid licence for everyone in your organisation. Eligible Microsoft 365 subscriptions already include Microsoft 365 Copilot Chat, with enterprise data protection, allowing all employees to use AI chat for free. Paid Copilot licences can then be assigned to the employees who stand to save the most time, and we help you identify them; a group that is usually smaller than the vendor suggests.
Our own fees are based on the size of your tenant and the state of your data, and the readiness assessment is a fixed fee. We will tell you the number on the first call.
Used properly, the numbers are good
According to Microsoft's survey of early Copilot users, 70% reported that they were more productive, 68% felt that it improved the quality of work, and 77% indicated that once they had used it, they did not want to stop using it. In the Forrester total economic impact model created for small and medium enterprises commissioned by Microsoft, a return on investment in 3 years ranging from 132% to 353% was forecasted. In the Microsoft 2026 Work Trends Index, 66% of AI users agreed that AI allows them to concentrate on high-value tasks.
Think about them as ceilings, not floors. All of those figures come from organisations that have done all the preparation work: from preparing the data, selecting use cases, to training their teams.
What Copilot does in a recruitment agency is not what it does in a law firm
Recruitment agencies
Call summaries, candidate write-ups and BD research in Outlook and Teams.
AI for recruitment agenciesLaw firms
First drafts, matter summaries and precedent search, with legal professional privilege protected.
AI for law firmsAccountancy firms
Management commentary, client correspondence and working-paper summaries around deadline season.
AI for accountancy firmsFinancial services
Review preparation, suitability drafting support and meeting notes, governed for a regulated firm.
AI for financial servicesCharities
Grant reports, supporter communications and trustee papers on charity licensing.
AI for charitiesA Microsoft partner that already runs your Microsoft 365
Copilot adoption is a security and data project with a productivity payoff. Most consultancies sell it the other way round.
We are a Microsoft Solutions Partner with a dedicated AI practice inside a managed IT and cyber security business that has supported professional services firms since 2010. That matters because the hard parts of a Copilot rollout, permissions, Purview, licensing and governance, are the parts we already manage for more than 250 organisations. We are not learning your tenant as we go, and once Copilot is live, the same team supports it alongside everything else.
Frequently asked questions
What is Microsoft 365 Copilot?+
Microsoft 365 Copilot is Microsoft's generative AI assistant built into Word, Excel, PowerPoint, Outlook and Teams. It works inside your own Microsoft 365 tenant, draws on your emails, documents and meetings through Microsoft Graph, and respects the permissions each user already has.
How much does Microsoft 365 Copilot cost in the UK?+
Microsoft 365 Copilot is £23.10 per user per month on an annual commitment. Microsoft 365 Copilot Business, for organisations with up to 300 users, is £16.10 per user per month, or £13.80 for the first year on Microsoft's current promotion. Prices exclude VAT and were correct in November 2026. See Microsoft's UK pricing page for the current figures.
What is a Copilot readiness assessment?+
It is a review of your Microsoft 365 environment before Copilot is switched on. We check licensing, permissions and oversharing, sensitive data, security posture and where time is being lost, then give you a written report with a prioritised fix list and a rollout plan. It typically takes 2 to 3 weeks.
Do we need a readiness assessment before deploying Copilot?+
Technically no, Microsoft will let you assign licences today. Practically yes. Copilot surfaces anything a user can already access, so most firms discover oversharing within the first week. Finding it first is cheaper than finding it later.
Does Microsoft use our data to train its AI?+
No. Microsoft states that prompts, responses and data accessed through Microsoft Graph are not used to train its foundation models. Copilot is covered by the same enterprise data protection commitments as the rest of Microsoft 365.
Can Copilot see all of our firm's documents?+
Copilot can only return content the signed-in user already has permission to view. That is why permissions matter more than the AI itself. If a confidential folder is shared with "Everyone", Copilot will treat it as fair game for everyone, which is the problem the Prepare stage fixes.
How long does a Copilot implementation take?+
Most firms reach a measured first rollout in 8 to 12 weeks: 2 to 3 weeks for the readiness assessment, a few weeks of preparation, then a 4 to 6 week pilot. Wider rollout follows at the pace your data and your people allow.
Do we need Copilot before we can build AI agents?+
No. Some firms start with Copilot, others have an obvious process to automate from day one. Copilot and agents share the same governance foundation, so whichever comes first makes the second easier.
What is the difference between Copilot Chat and Microsoft 365 Copilot?+
Copilot Chat is included with eligible Microsoft 365 subscriptions at no extra cost. It is mainly grounded in the web, with enterprise data protection. The paid Microsoft 365 Copilot licence adds Copilot inside Word, Excel, PowerPoint, Outlook and Teams, grounding in your organisation's own data, and access to advanced agents.
Does Copilot work with our practice or recruitment software?+
Copilot works across Microsoft 365. It does not natively read your CRM, practice management or case management system unless a connector or agent is built for it. That is normally a second phase, and it is where the Build and Run area of our AI Enablement service comes in.
Book a Copilot readiness assessment
We'll review your Microsoft 365 environment, show you exactly what Copilot would see on day one and give you a prioritised plan to roll it out securely.
Book a readiness assessment →