Is your tenant Copilot-ready?

No. The 10-question self-check uses your answers to suggest a readiness score and priorities. It has no access to your Microsoft 365 tenant. Request the separate free automated tenant scan for configuration evidence; Fusion Computing confirms the read-only access and setup with you first. The paid AI Technical Readiness Assessment is a separately scoped engagement for the wider governance, data-access and AI-use review.

A Copilot readiness scan is an automated, API-driven evaluation of whether a Microsoft 365 tenant is ready for Copilot. Fusion Computing's free scan runs Microsoft's official open-source assessment engine (MIT licensed, published 2026) against the live tenant and scores seven service areas: M365 licensing, Entra ID, Defender XDR, Purview, Power Platform, Copilot Studio, and Agent 365. Every check is marked Compliant, Warning, or Not Configured with a priority and a recommendation, delivered to Canadian businesses as a branded report with a 30-minute walkthrough.

Yes, genuinely. The assessment engine is Microsoft's own open-source tool (MIT licensed), the run is automated, and the readout call is 30 minutes. Because our delivery cost is small, we can give it away. Our deeper engagements, like the AI Technical Readiness Assessment and the Cybersecurity Gap Assessment, are paid, and we are upfront about that distinction.

A read-only service principal with scoped permissions to Microsoft Graph, Defender, Exchange Online, and Power Platform APIs. Nothing is installed on endpoints, no third-party agents are involved, and nothing leaves your tenant except the report. Access is documented during setup and you can revoke it the same day the run completes.

Seven service areas: M365 licensing, Entra ID, Defender XDR, Purview, Power Platform, Copilot Studio, and Agent 365 readiness. Every check is marked Compliant, Warning, or Not Configured with a priority level and a specific recommendation, plus a Fusion-written executive summary and fix list.

It is a configuration-level scan, not a compliance guarantee, and Microsoft's own documentation says the same about the engine. It reads tenant settings through APIs; it does not review governance policy, shadow-AI usage, or the content your users have actually overshared. Those questions belong to the paid AI Technical Readiness Assessment.

Yes. The Purview and data-protection findings are read against the expectations Canadian regulators and insurers actually apply: PIPEDA federally, PHIPA for Ontario health information, and Quebec's Law 25. The scan runs read-only inside your own tenant, so data residency is unaffected, and Fusion Computing is Canadian-owned and Canadian-staffed. The branded report notes where a finding carries a Canadian compliance implication, not just a Microsoft best-practice one.

The scan is the automated, free entry point: a snapshot of what your tenant configuration allows today. The AI Technical Readiness Assessment is the paid, CISSP-led engagement for the broader review: how AI reaches your data across Copilot and the third-party tools your staff use, permissions and oversharing, identity scoping, and a remediation roadmap. Scope and deliverables are confirmed in writing before work begins. Run the scan first; commission the assessment where it flags risk.

Especially then. Most Warning rows we see are Purview and Entra ID settings that decide what Copilot can surface to whom. Running the scan after purchase tells you whether to widen the rollout or fix data protection first, before more users start asking Copilot questions.

About an hour of your time across two calls, with the automated run and our interpretation in between. Booking to branded readout is typically a few business days.