Skip to content

Services

Governance work, scoped by your own findings.

Senior Microsoft consultants who close what The Governor finds, from Managed Environments to Agent 365.

In short

Ustrema runs eight governance service lines on Microsoft Power Platform, Copilot Studio and Dynamics 365: assessment and framework, platform rollout, agent governance, data protection for AI, credit and licence FinOps, ALM, managed governance and building on a governed platform.

  • 8service lines, each tied to a Governor module
  • 10+senior consultants and solution architects, named before work starts
  • Fixedfees for scoped work, monthly retainers for ongoing governance
  • EUnearshore team in Sofia, inside your time zone

Which governance service do we need?

Most organisations start with the assessment, then pick the lines their scan points to. Every line is scoped from findings in your tenant, so you see the work before you buy it.

01

Governance assessment and first engagement

It starts with a free discovery call on the summary from your Governor scan: your findings in context, a proposal and the options. The first engagement is fixed price and usually runs four to six weeks: quick settings fixed, strategies decided, a decision log and a backlog with hours, delivered in work packages you approve.

What you get

  • Quick settings fixed in the first weeks
  • Decisions with owners in a decision log
  • A backlog with hours, in work packages you approve
How it is bought
Free call, then fixed price
Typical duration
4 to 6 weeks
Microsoft services
Power Platform admin centerPower Platform inventory
Related module
Operating model

02

Platform rollout and Managed Environments

We design your environment strategy and put the controls in place: Managed Environments, environment groups, data policies, sharing limits and creation rights. We also move apps, flows and agents off unmanaged developer and Dataverse for Teams environments before Microsoft retires them.

What you get

  • An environment model with naming and groups
  • Data policies and tenant isolation for the whole tenant
  • Work moved off retiring environments before Microsoft's dates
How it is bought
Fixed price
Typical duration
4 to 6 weeks
Microsoft services
Managed EnvironmentsDLP policiesEnvironment groups
Related module
Environment strategy

03

Copilot Studio and agent governance

We make every Copilot Studio agent known, owned and safe: an agent baseline and intake, authentication and sharing fixed, Entra Agent ID, credit limits per agent and every agent in the Estate with its purpose and business owner. The checks need no Agent 365; where you own it, we roll it out and connect it to the same rules.

What you get

  • Every agent with owner, purpose and review date
  • Authentication and sharing fixed on published agents
  • Credit limits on the agents that consume most
How it is bought
Fixed price, then monthly
Typical duration
3 to 5 weeks
Microsoft services
Copilot StudioAgent 365Entra Agent ID
Related module
Agent governance

04

Data protection for AI

We find the SharePoint sites, Dataverse tables and mailboxes your apps and agents actually use, then fix oversharing, labels and owners on exactly those. Where you own Microsoft Purview, we configure DSPM for AI and data policies for agents so the fixes stay enforced.

What you get

  • A list of every site your apps and agents use
  • Sharing, labels and owners fixed on those sites
  • Purview policies that keep it that way
How it is bought
Fixed price
Typical duration
3 to 6 weeks
Microsoft services
Microsoft PurviewSensitivity labelsSharePoint Advanced Management

05

Credit and licence FinOps

We match Copilot credits, pay-as-you-go and premium licences to real use, set limits on the agents and environments that consume most, and give every budget an owner. You go into your next Microsoft renewal with a licence position you can defend.

What you get

  • A credit runway and allocation per environment
  • Limits on the biggest consumers
  • A licence position for renewal
How it is bought
Fixed price
Typical duration
2 to 4 weeks
Microsoft services
Copilot Studio creditsPay-as-you-go billingPower Platform licensing

06

ALM, pipelines and safe delivery

We put managed solutions, pipelines with an approval gate and service accounts that own production in place, so every change reaches production the same way. Microsoft blocks pipelines that deploy to unmanaged targets from October 2026, so your targets become managed first. The Governor then confirms each week that nothing goes around the pipeline.

What you get

  • DEV, TEST and PROD with managed solutions
  • An approval gate on the way to production, with the Pipelines Approvals module if you want it
  • Deployments run by a service principal
How it is bought
Fixed price
Typical duration
3 to 5 weeks
Microsoft services
Power Platform pipelinesAzure DevOpsGitHub
Related module
ALM and pipelines

07

Managed governance

A monthly retainer in which our consultants work your Governor backlog, watch for regressions, brief you on Microsoft changes that hit your estate and send a short note to management every month. It is how most clients keep the platform governed after the first weeks, without hiring a full team.

What you get

  • Hours each month on the backlog
  • Regressions caught in the weekly scan
  • A monthly note to management
How it is bought
Monthly
Typical duration
Ongoing, monthly notice
Microsoft services
Power Platform admin centerMicrosoft Purview Audit
Related module
Monitoring and audit

08

Building on a governed platform

Once the guardrails are in place, we build apps, automations and Dynamics 365 solutions properly the first time, inside the governance you just set up. Fixed-scope entry points and short cycles mean you see working results early.

What you get

  • Working software every sprint
  • Solutions that pass your own checks
  • Your teams trained to own them
How it is bought
Fixed scope or time and materials
Typical duration
From 4 weeks
Microsoft services
Power AppsPower AutomateDynamics 365Dataverse

How does an engagement run?

Every step ends with a decision point, so you stay in control of scope and spend. You can stop after the assessment with a clear plan.

  1. Free

    Discovery call

    We go through the summary from your free Core and show findings, a proposal and the options.

  2. Fixed price

    First engagement

    Four to six weeks: quick settings fixed, strategies decided, a backlog with hours.

  3. Monthly

    Managed governance

    Hours each month, regressions watched, a note to management.

  4. When needed

    Add-ons

    Extension modules and scoped blocks such as agent migration, environment moves or audit readiness.

Every hour we bill shows up in your next scan.