1. App Audit (Entra ID / Defender)
We scan your IT infrastructure for unlicensed AI applications and data leaks.
AI Governance & Compliance
Practical AI governance for SMEs.
Unknown or inconsistent AI use can raise data-protection, confidentiality and security questions. We map the agreed starting point, help shape internal guardrails and review selected Microsoft 365 settings. Scope and deliverables are agreed in advance; this is not a blanket compliance or security guarantee.
Our Governance Services
2. Employee Surveys
Anonymous capture of actual tool usage in the team to shine a light on blind spots.
3. AI Policy
Draft of a custom, easy-to-understand usage agreement for your employees.
4. Purview & DLP Hardening
Configuration of Microsoft Purview and Data Loss Prevention to protect against leaks by Copilot.
5. Compliance Training
Sensitizing employees to privacy risks when entering sensitive data.
6. Assess whether a data protection impact assessment is needed
We clarify whether a DPIA is required for the specific use and can support documentation within the agreed scope.
Security Philosophy
Freedom through clear boundaries.
Clear guidance helps teams use AI tools thoughtfully. We review actual usage, discuss suitable alternatives and document responsibilities, open privacy questions and next steps.
Audit & Setup Formats
Scope, timing and price depend on your environment and are agreed before work begins.
Security Tools
We use integrated security features of Microsoft 365 (Purview, Defender) and integrate additional, carefully vetted hosting solutions as needed.
Infomaniak
Swisscom Cloud
Cloudflare
From a live engagement
We are writing the AI usage rules for a Swiss client rolling out Copilot right now.
Is your IT Governance ready for AI?
Let's clarify in 15 minutes what security gaps Copilot could open for you and how to close them quickly.
Book governance callFour steps to clear AI usage rules
01
Audit & Inventory
We scan your logfiles and identify anonymously which tools your team uses and what data flows there.
02
Policy & Releases
We write your AI employee guidelines and define clear release paths for sensitive data.
03
Technical Hardening
We activate and configure your Microsoft security settings (Sensitivity Labels, DLP).
04
Training & DPIA
We train your team and hand over the complete Data Protection Impact Assessment for your files.
Governance Deliverables
01
Shadow AI Inventory (list of all used AI tools)
02
Draft AI usage policy within the agreed scope
03
Documented configuration of your Microsoft 365 tenant security
04
DPIA documentation when required and included in scope
05
Employee training log & sensitization presentation
06
Approved list of secure alternative tools for your team
Laura Hähni
CFO & Compliance Officer, bdlh.ch
“We knew our employees used ChatGPT, but had no idea that sensitive financial data flowed there. The governance sprint closed this gap in 4 weeks. We now have clear policies, Microsoft Purview is active, and our team knows exactly what is allowed.”
Why schnellstart.ai?
Data
understand flows for the agreed use
Rules
document responsibilities for your team
Next steps
prioritize open questions
Governance Stack: Microsoft + Swiss Additions
We activate what you already have in your M365 license, and add Swiss-hosted where it truly matters for compliance.
Microsoft 365 Copilot
FADP-compliant Configuration
Microsoft 365 Copilot with Sensitivity Labels, DLP rules and tidy SharePoint permissions. Productive without oversharing risk.
Microsoft Purview
DLP & Compliance
Microsoft Purview for Sensitivity Labels, Data Loss Prevention and audit logging. Already included in most M365 licenses, just not activated.
Azure OpenAI (Swiss)
Swiss-region OpenAI
Azure OpenAI in the Swiss region (Zurich), GPT models without data flowing to the US. For critical use cases with data residency requirements.
Infomaniak
Swiss Hosting
Swiss cloud provider for AI models and workflows that don't run through Microsoft. 100% in Switzerland, B-Corp certified.
n8n (Swiss-hosted)
Workflow Automation
n8n on Swiss servers for governance workflows: audit trails, approval flows, vendor onboarding. Self-hosted, no vendor lock-in.
Entra ID & Defender
Identity & Shadow AI
Entra ID app audit, Conditional Access and Defender for Cloud Apps, the identity and monitoring layer that makes shadow AI visible.
Regulated Industries
AI Governance for highest confidentiality.
Especially in law, fiduciary, and finance sectors, data protection is vital. We adapt your governance setup to your professional secrets.
Automated document processing, client portals and FADP-compliant data systems. We connect your existing tools (Bexio, Abacus, KLARA) into a seamless workflow.
View governance industry exampleProject management dashboards, automated quoting processes and document management. Digitalization for construction projects: from proposal to final billing.
View governance industry examplePatient portals, appointment management and secure data systems. EPD integration and FADP-compliant AI solutions for practices, home care and clinics.
View governance industry exampleAutomated document analysis, client management and FADP-compliant communication. AI tools that reduce routine tasks in law firms.
View governance industry exampleERP integration, digital project management and AI-powered process optimization. Software for manufacturing SMEs, from order to delivery.
View governance industry exampleShop integration, inventory automation and customer analytics. We connect online and offline channels into a seamless customer journey.
View governance industry exampleYour auditors
Lukas Huber
AI governance & privacy questions
Florian Witschi
Microsoft 365 Tenant Hardening
“Schnellstart built our entire digital backbone. We went from a concept to a fully automated inbound machine in weeks.”
Viktoria
Alventis
Alventis