Skip to content

The Governor

Watch your tenant get governed.

One app inside your tenant. 250 checks every week. Each failing check becomes a finding your team or ours closes.

Get the free CoreSee licensing

135

Open findings

0

Closed

Week 0.0

0%

Open ClosedIllustrative closure model for a reference-size tenant with about 130 failing checks. Your numbers come from your own scan.

The Governor in short

The Governor is one governance center for Microsoft Power Platform, Copilot Studio and agents. It runs inside your tenant, measures 250 checks every week, and turns each gap into a tracked finding with an owner, a deadline and an approval, while every change is made in Microsoft, one click away.

  • 250checks in 11 core modules and the Compliance extension, from agents and DLP to credits and Power Pages
  • 7of them free in the Core, each with its affected items and step-by-step fixes
  • 73%of failing checks closed by week 12 in our planning model
  • Per tenantone yearly price, no per-user fees

How does The Governor work?

It measures facts in your tenant, Ustrema turns them into decisions, and every weekly scan proves what changed. Leadership, IT and the people doing the work see the same app from different sides.

  1. Measure

    A weekly scan of environments, apps, flows, agents, credits and the data they reach.

    250 checks, every week

  2. Decide

    Findings ranked for your organisation, each with an owner, a deadline and the decision behind it.

    Agreed with you in the first engagement

  3. Prove

    Every week shows what closed and what came back. A monthly report reaches management by email.

    No extra licences for executives

What is in the app?

Everything the governance team needs to see, decide and prove in one place, and one click into Microsoft to act. The signals from the admin centers, Entra, Purview, Copilot Studio and billing sit next to your decisions, owners, approvals and evidence.

  • Estate

    Environments, apps, flows and agents, each with its owner, open findings and business fields such as purpose and review date.

  • Findings with a plan

    Each finding shows the affected items, Microsoft Learn links, the decision behind it, who fixes it and by when.

  • Approvals

    Work packages before changes, completed work to confirm, accepted risks to sign: one queue for your approvers.

  • What's changing

    Microsoft deadlines that hit your estate, your own Message Center posts and our advisories, signed and in one page.

  • Microsoft tools

    Which Microsoft governance tools are switched on, where, who owns them and what they need.

  • One click into Microsoft

    Every check, finding and item opens the exact Microsoft page. The app itself only reads and never changes your tenant.

Everything about The Governor

Three pages go deeper: what each module checks, how the licence is priced, and how your data stays inside your tenant.

How does a licence code work?

There is no connection between your tenant and ours. Everything moves by copy and paste, approved by you, so your security team stays in control of every step.

  1. Free

    Install Core

    A free managed solution. No licence needed.

  2. Free

    Share the summary

    You preview and copy an anonymised summary. Nothing is sent automatically.

  3. Free

    Discovery call

    We go through your summary and show findings, a proposal and the options.

  4. Platform

    Paste the code

    A signed code and your framework, bound to your tenant. Your owner approves the import.

  5. Yearly

    Run and renew

    Weekly measurement shows progress. If you stop, the platform turns read-only and the free Core keeps measuring.

Questions IT asks first

Do we need extra Microsoft licences?

Only for the few people who open the app: Power Apps Premium or a per-app licence, or pay-as-you-go on that one environment. The account that runs collection needs Power Automate Premium. Executives receive the weekly email and the monthly report, which need nothing.

What happens if we stop paying?

You get a reminder 60 days before the end date and 30 days of grace after it. Then the platform turns read-only: your plan, decisions, history and evidence stay readable and exportable, and the free Core keeps measuring every week. Nothing is deleted, and a renewal catches up from the stored results.

Does The Governor change anything in our tenant?

No. It only reads. Fixes are made by your admin, or by our consultants with your approval, in Microsoft's own portals; every check, finding and item opens the exact Microsoft page with one click.

How is it different from Microsoft's own governance tools?

Microsoft's admin center recommendations, Agentic Center of Enablement (in preview) and Agent 365 find common problems. The Governor measures against what you decided, keeps weekly evidence, covers credits, licences, identity, connected data, outbound connections and Microsoft deadlines, and brings people who do the work. It works with or without those tools and reads their signals where you have them.

Does it cover Power BI, Fabric or Dynamics 365?

Not today. The Governor covers Power Platform, Copilot Studio, agents and the data they reach. Power BI and Fabric, and Dynamics 365, are planned as future modules.

Is The Governor on Microsoft AppSource?

Not yet. The Governor is in its pilot phase and we install it with you on a guided call. The free Core will be listed on AppSource; the platform licence stays a contract with us.

Can our own consultants use it?

Yes, the platform licence works without us. Most clients still bundle it with our experts: the platform and the hours both cost less, and their own team learns the framework by working beside ours.

Sources

The primary documentation and law this page relies on. Each link opens the original source.