Foundation program
Fix the foundations, then put your first two agents to work.
AI that nobody uses and an insurance questionnaire nobody can answer often share a cause: no security baseline and no clean data. Foundation fixes both, then puts two agents into production, with your people approving the exceptions.
At a glance
Scoped from your Assessment, priced before you commit.
Foundation has no list price, because no two starting points are the same. The Assessment finds yours, and your Stage Roadmap carries the fixed price.
Price
Scoped after the Assessment
A fixed price in your Stage Roadmap, so you know it before you commit.
Time
Typically 8 to 12 weeks
The Assessment sets the exact plan from what it found. A move to Microsoft 365, if you need one, adds to it.
Stages
Builds toward AssistedOperated
It leaves you at Assisted and moving into Operated.
Before part one
Not on Microsoft 365 yet? The move comes first.
If you're on Google Workspace, the move to Microsoft 365 is scoped in your Assessment, priced in your Stage Roadmap, and added to Foundation's timeline. On anything else, the Assessment scopes the move the same way. Bought on its own, the move is a fixed fee, scoped on a 30-minute call.
From Google Workspace
Tooling TNT built and tested on test tenants, not yet run for a client: Drive files to SharePoint with links fixed and sensitivity labels applied, Chat spaces to Teams, and Gemini chat to Copilot Chat.
Google Workspace migrationWhy Microsoft?
Because identity, email, files, security and agents can be owned in one place there, so one partner can answer for all of it. We run TNT on it.
Part one
The security and insurance baseline.
The controls your cyber insurer asks about, put in place and proven, before any agent touches your data.
Every sign-in protected
MFA on every account, enforced through Conditional Access, with documented emergency accounts so nobody is locked out of their own company.
Every device protected
Laptops and phones enrolled in Intune and protected by Microsoft Defender, with alerts that reach a person.
Backups you've restored from
Microsoft 365 backup with restore points nobody can alter, and a real restore run before we call it done.
Confidential files stay confidential
Microsoft Purview sensitivity labels, data-loss rules and audit retention, so sensitive files are labeled before Copilot can surface them.
Only the right people get in
Licenses matched to people, old accounts and sharing links cleaned up, and outdated sign-in methods blocked.
Your next renewal, answered with evidence
A dated record of each control, ready for your next insurance questionnaire or audit.
Part two
Your data, in one place.
Agents are only as good as the data they read. Foundation puts customers, work and money in one place in your own Microsoft 365, which people and agents both use. Every action an agent takes is logged against the record it read.
Found
Where each kind of data lives today: the CRM, the spreadsheets, the shared inboxes and the line-of-business apps.
Cleaned
Duplicates merged, fields made consistent, and the records that matter brought up to date.
Connected
One record in your own Microsoft 365, reachable from the tools your people use every day, with access set by role.
Part three
Your first two agents, in production.
Two agents on work every company does, chosen in your Assessment and running on the new record. They draft; your people approve the exceptions in Teams. An agent earns more room only on its measured record. TNT's meeting assistant can be one of the two.
Intake and follow-up
Every enquiry from your website, inbox or booking page lands on the record and is acknowledged, and the follow-up is drafted for a person to approve.
Owner reporting
The numbers you run the business on, drafted from the record into a regular report, so you see them without asking anyone.
Or the meeting assistant
Briefed before each Teams meeting, with the notes, action items and follow-up drafted after, for a person to send.
Live
Live at TNT: Thiago uses it every day for meeting prep, notes and follow-ups. Not yet set up for a client.
What runs TNT
TNT's own intake runs on the same pattern.
Every enquiry to TNT lands on one record and is acknowledged, and the Teams queue where agent drafts wait for a person is in place. Here is the status of each, from our own records.
| System | What it does | Status |
|---|---|---|
| Website, email and booking intake | Turns every enquiry into a lead on one record and acknowledges it in minutes | Live |
| Teams approval queue | Every agent draft waits here for a person to approve, edit or reject | Live |
How we make changes
Report-only first. Your approval, always.
Foundation changes how your company signs in, shares and stores data, so every change is made the careful way.
Report-only before enforce
New sign-in and security policies run in report-only mode first, so we see who they would affect before anyone is blocked.
Your approval, in a change window
Every change to your systems waits for your approval, runs in an agreed window and has a rollback step.
On TNT's own systems first
Every baseline setting runs on TNT's own Microsoft 365 before it is applied to yours.
Where it leaves you
At Assisted, and moving into Operated.
The two stages Foundation works on, as every Scorecard and Assessment defines them.
Where Foundation leaves you
Assisted
Copilot and AI tools licensed and governed, security and insurance baseline in place, data cleaned and reachable.
Where you're heading
Operated
Agents run defined workflows with people approving exceptions, on one record, with a control plane.
Where to start
Every Foundation program starts with an Assessment.
That's where its scope and fixed price come from. Not ready for that? Start with the free Scorecard, which places you on the four stages from the outside.