Say yes to AI. Keep your name safe.

Your clients will adopt AI either way. Through you, it’s governed, logged and reversible.

What’s changed.

Copilot surfaces whatever is already overshared.Microsoft [1]
Zero-click attacks on Copilot are real. Microsoft fixed EchoLeak in 2025.MSRC [2]
Agents can be hijacked through the content they read.OWASP [3]
The NCSC says keep people in charge of what agents do.NCSC [4]
53% of MSPs rank cybersecurity among their top concerns for 2026.Kaseya [5]

How we build it.

Least privilege

Named, least-privilege accounts you create, with MFA and Conditional Access. No standing Global Admin; just-in-time elevation through PIM.

Read-only first

Readiness runs read-only through Microsoft Graph. A person reviews every finding. You approve every change.

Data before AI

Oversharing fixed first with SharePoint Advanced Management, sensitivity labels and DLP.

Agents on a leash

Run as the user, no autonomous outbound actions, approved connectors and MCP servers only, logged, with an off switch. Built to the OWASP agentic Top 10 and NCSC guidance.

Tenant separation

Each client’s data stays in its own tenant. Nothing trains models or passes between clients.

Stated residency

Which model, where it runs and on what terms, including the EU Data Boundary.

Paperwork and status.

Data processing agreement: We’re named as a sub-processor under UK GDPR, with a ready-made notice for your clients.
Liability cap: Set out in the partner agreement. We go through it before any work starts.
ICO registered: OpSync AI Ltd is registered with the Information Commissioner’s Office, reference ZC226369.
Cyber Essentials: In progress. In place before we access any client tenant.
Insurance: Professional indemnity and cyber cover. Certificates shared before any work starts.

What owners ask us.

What access do you need?

Named, least-privilege accounts you create, read-only to start. You can remove them at any time.

What if an agent is prompt-injected?

It can’t send data out on its own. Agents run as the user, connectors are limited to the ones you approve, and activity is logged.

Copilot will surface what’s overshared.

So the oversharing fix comes before any rollout.

Are you another supply-chain risk?

No standing admin rights, no shared credentials, and separate tenants. Your client list is used for your demand read and nothing else: we don’t market to it or share it, and we delete it when you ask.

Who carries the liability?

The partner agreement sets out the data processing terms and a liability cap. We go through both before any work starts.

My clients will blame me if it goes wrong.

Nothing changes without your approval, and the monthly report shows the controls working.

Sources

Microsoft’s guidance on configuring data access and reviewing oversharing before Copilot rollout.
Microsoft Security Response Center, CVE-2025-32711, 2025.
OWASP Top 10 for Agentic Applications, December 2025.
NCSC, Thinking carefully before adopting agentic AI, 2026.
Kaseya’s 2026 State of the MSP report, figure 2. The survey is mostly North American.

Let’s build your AI practice.

A 30-minute call with Charlie. We’ll tell you which part to start with.

Book a partner call