Do we have to move away from Microsoft to use AI safely?

No. We build on your existing stack, Microsoft 365 and Copilot stay your tools, we set up governance around them. Defender, Purview and Conditional Access ship with most M365 licenses; we activate and configure what you already pay for. Swiss-hosted is only added where it genuinely matters for compliance.

What does a full AI governance audit cost?

A focused shadow AI audit (Entra ID app check, Defender analysis, employee survey, initial policy) starts at CHF 1,500. A full AI governance setup with Copilot configuration and team training typically runs CHF 4,000-8,000, depending on size and existing infrastructure.

How quickly are the first results visible?

After week one you have the full shadow AI inventory in hand, every tool in use, every data flow. The full sprint takes SMEs from 'no idea' to 'under control' in four weeks: inventory, policy, technical controls, approved alternatives. Measurable results every week instead of multi-month projects.

Is our data safe with a Microsoft-based solution?

With governance correctly switched on: yes. Microsoft 365 and Copilot are FADP-ready once Sensitivity Labels, DLP rules, Conditional Access and audit logging are in place. For particularly sensitive data (fiduciary, healthcare, legal) we add Swiss-hosted AI, data never leaves Switzerland. A Data Protection Impact Assessment (DPIA) for Copilot is part of the setup.

SCHNELLSTART.AI

Language

Services

Websites & KPI Tracking Workshop & Training 1:1 Sparring & Strategy

Industries

Accounting & Finance Construction & Real Estate Healthcare Legal & Law Firms Manufacturing & Logistics Retail & E-Commerce

Workshops

Upcoming DatesLive workshops in Switzerland Workshop InsightsHow our trainings work Handout MaterialSlides & PDFs from events

Knowledge & Guides

Blog & News Practice Guides Templates & Tools Client Projects FAQ

About us

Book

AI Governance & Compliance

Secure AI deployment. FADP-compliant.

Employees silently use public AI tools with sensitive company data (shadow AI). This violates data protection and risks business secrets. We run a shadow AI audit, draft clear policies, and configure your Microsoft or Cloud environment so you keep full control. FADP-compliant, legally secure, pragmatic.

Book Governance Check

Lukas Huber analyzing IT security guardrails for data-compliant AI use

Shadow AI Audit

We uncover unlicensed AI use in your organization and make data flow risks visible immediately.

FADP Policies

We write your internal AI employee guidelines matching the Swiss Data Protection Act (nDSG).

Microsoft Hardening

We configure sensitivity labels and DLP rules in Microsoft 365 so Copilot does not leak internal data.

Our Governance Services

1. App Audit (Entra ID / Defender)

We scan your IT infrastructure for unlicensed AI applications and data leaks.

2. Employee Surveys

Anonymous capture of actual tool usage in the team to shine a light on blind spots.

3. AI Policy

Draft of a custom, easy-to-understand usage agreement for your employees.

4. Purview & DLP Hardening

Configuration of Microsoft Purview and Data Loss Prevention to protect against leaks by Copilot.

5. Compliance Training

Sensitizing employees to privacy risks when entering sensitive data.

6. Data Protection Impact Assessment

We create the legally required DPIA for your use of Microsoft Copilot or third-party AI.

Security Philosophy

Freedom through clear boundaries.

Bans do not prevent shadow IT; they only drive it underground. Our governance approach sets clear, pragmatic rules and provides secure, approved alternatives (such as Swiss-hosted AI). Thus you enable maximum productivity without risking legal liability as an executive.

Audit & Setup Formats

From uncontrolled AI usage to legally secure governance structures in four weeks.

Graphical representation of data leaks into unlicensed US cloud AIs

1. Shadow AI Audit

We analyze your IT infrastructure and uncover all unlicensed data flows. You receive a full inventory.

Fixed price · 1 week · IT inventory & report

Lukas Huber configuring Microsoft Purview in the Microsoft Admin Center

2. Governance Sprint

Full setup: policies, technical Microsoft configuration, release schemas, and Data Protection Impact Assessment.

4 weeks sprint · Technical hardening · Employee guidelines

Auditor reviewing Data Protection Impact Assessment for compliance

3. Governance & Audit Retainer

Regular review of new AI tools, hardening of settings, and continuous adaptation to regulations (EU AI Act / DSG).

Half-yearly check · Updates · Compliance support

Security Tools

We use integrated security features of Microsoft 365 (Purview, Defender) and integrate Swiss hosting solutions as needed.

Infomaniak

Swisscom Cloud

Azure CH North

Risk Minimization

Legal security and data control for executive management.

Is your IT Governance ready for AI?

Let's clarify in 15 minutes what security gaps Copilot could open for you and how to close them quickly.

Book governance call

The Governance Sprint in 4 Weeks

Audit & Inventory

We scan your logfiles and identify anonymously which tools your team uses and what data flows there.

Policy & Releases

We write your AI employee guidelines and define clear release paths for sensitive data.

Technical Hardening

We activate and configure your Microsoft security settings (Sensitivity Labels, DLP).

Training & DPIA

We train your team and hand over the complete Data Protection Impact Assessment for your files.

Governance Deliverables

Shadow AI Inventory (list of all used AI tools)

Ready-to-use AI employee guidelines (FADP-compliant)

Documented configuration of your Microsoft 365 tenant security

Complete Data Protection Impact Assessment (DPIA) for Copilot

Employee training log & sensitization presentation

Approved list of secure alternative tools for your team

Laura Hähni

CFO & Compliance Officer, bdlh.ch

“We knew our employees used ChatGPT, but had no idea that sensitive financial data flowed there. The governance sprint closed this gap in 4 weeks. We now have clear policies, Microsoft Purview is active, and our team knows exactly what is allowed.”

Why schnellstart.ai?

0 weeks

From audit to full compliance

FADP & GDPR compliance guaranteed

Liability risk for management

Governance Stack: Microsoft + Swiss Additions

We activate what you already have in your M365 license, and add Swiss-hosted where it truly matters for compliance.

Microsoft 365 Copilot

FADP-compliant Configuration

Microsoft 365 Copilot with Sensitivity Labels, DLP rules and tidy SharePoint permissions. Productive without oversharing risk.

Microsoft Purview

DLP & Compliance

Microsoft Purview for Sensitivity Labels, Data Loss Prevention and audit logging. Already included in most M365 licenses, just not activated.

Azure OpenAI (Swiss)

Swiss-region OpenAI

Azure OpenAI in the Swiss region (Zurich), GPT models without data flowing to the US. For critical use cases with data residency requirements.

Infomaniak

Swiss Hosting

Swiss cloud provider for AI models and workflows that don't run through Microsoft. 100% in Switzerland, B-Corp certified.

n8n (Swiss-hosted)

Workflow Automation

n8n on Swiss servers for governance workflows: audit trails, approval flows, vendor onboarding. Self-hosted, no vendor lock-in.

Entra ID & Defender

Identity & Shadow AI

Entra ID app audit, Conditional Access and Defender for Cloud Apps, the identity and monitoring layer that makes shadow AI visible.

Regulated Industries

AI Governance for highest confidentiality.

Especially in law, fiduciary, and finance sectors, data protection is vital. We adapt your governance setup to your professional secrets.

Automated document processing, client portals and FADP-compliant data systems. We connect your existing tools (Bexio, Abacus, KLARA) into a seamless workflow.

View governance industry example

Project management dashboards, automated quoting processes and document management. Digitalization for construction projects: from proposal to final billing.

View governance industry example

Patient portals, appointment management and secure data systems. EPD integration and FADP-compliant AI solutions for practices, home care and clinics.

View governance industry example

Automated document analysis, client management and FADP-compliant communication. AI tools that reduce routine tasks in law firms.

View governance industry example

ERP integration, digital project management and AI-powered process optimization. Software solutions for manufacturing SMEs: from planning to delivery.

View governance industry example

Shop integration, inventory automation and customer analytics. We connect online and offline channels into a seamless customer journey.

View governance industry example