The AOC is a fully managed AI agent governance service for your Microsoft estate. Our team discovers, classifies, monitors and governs every agent, and reports the outcomes back to your stakeholders. Think of it as the third operations centre alongside your SOC and NOC, run for you as a service rather than another tool for your people to staff.

Microsoft gives you the levers through Agent 365, Purview, Entra and Power Platform, but pulling them every week, with evidence, is a new operations job. The AOC is the team that does that job. You do not get another dashboard to run; you get the outcomes, the decisions and the audit trail.

The AOC is a monthly managed service. We start with a full discovery of your agent estate, then give you a customised quote based on what we find. Billing is annual in advance, which is our preferred option and comes with a discount. Otherwise it is quarterly in advance.

Every agent in your estate is monitored from day one, and inventory is unlimited. An agent becomes managed, receiving the full governance lifecycle, when it is high-risk under the EU AI Act, among your highest agents by spend or risk, or nominated by you. You govern what matters, and pay to deep-govern only what matters.

We work through least-privilege, read-first access using Microsoft GDAP, never global admin. You grant the access, you see every use of it, and you can revoke it at any time. Every action on your tenant is ticketed, logged and reported back to you. We are Cyber Essentials certified, with ISO 27001 and 9001, and you choose whether we operate entirely inside your tenant or from a dedicated environment in your region.

No. The AOC works alongside your SOC and MSP with an agreed escalation path, never as a second one. We provide expert judgment through the working day, and critical alerts still route to your SOC around the clock, with owner and context attached.

The Act’s transparency duties under Article 50 apply from 2 August 2026, and they sit with you, the deployer, agent by agent. High-risk obligations were pushed to December 2027, but transparency was not extended, and you cannot disclose for agents you do not know you have. The AOC classifies every agent, flags what each rule requires, and keeps your evidence current as the rules change.

We cover agents built and run across your Microsoft estate: Copilot Studio, Power Platform, Microsoft Foundry and Microsoft 365. Enterprise adds shadow agent discovery, policy enforcement and threat detection through Microsoft Agent 365. Optional coverage is available for ChatGPT Business and Enterprise, and Claude Team and Enterprise, limited by what each platform’s console exposes.

No. You get the managed service, the reporting and the evidence. The way we run the operation, our internal tooling, playbooks and delivery methods, stays with us. You buy the outcome, not the mechanics.