← Sovereign Stack/Pillar P1Weeks 1–6 · first ambient copilot live by week 2ex · Workspace

Sentient Workspace — Copilots · Agent OS · Device-as-API

We don't resell licences. We re-engineer the workspace into a sentient surface — Copilot tuned to your business graph, ambient meeting intelligence, agent-routed inboxes, zero-prompt productivity. Every seat compounds.

Knowledge throughput

+ 38%

Meeting prep time

− 76%

Copilot adoption (90d)

82% DAU

Commission this pillar →See deliverables

Flagship pods

The squads we drop in

Sales Copilot Pod

Legal & Contracts Pod

Exec Briefing Pod

Frontline Knowledge Pod

Deliverables

Everything that ships

Copilot tuning pack
Grounded prompts, business-graph plugins, deny-lists, per-role evals.
Ambient meeting intelligence
Auto-recap, action extraction, CRM sync, redaction by policy.
Agent-routed inbox
Triage, draft and dispatch agents with HITL gates and audit trail.
Device-as-API fleet
Posture-aware MDM, signed device identity, just-in-time entitlement.
Zero-trust SSO mesh
Conditional access, phish-resistant MFA, SCIM lifecycle to all SaaS.

Pod composition

Workspace Principal
Copilot Tuning Engineer
Identity / SSO Architect
Change & Adoption Lead

Partners we orchestrate

Microsoft 365 CopilotGoogle Workspace + GeminiApple BusinessOkta1PasswordIntune

Example output · Agent · workspace.copilot.policyyaml

agent: workspace.copilot
surface: [outlook, teams, word, excel]
grounding:
  graph: m365 + sharepoint + crm.read
  freshness_sla: 5m
guardrails:
  pii: redact
  legal_hold: enforce
  region_pin: eu-west
evals:
  golden_set: 412 prompts
  pass_rate_min: 0.94
escalation:
  to: human_reviewer
  if: confidence < 0.7 OR contains(legal_terms)

Timeline

Weeks 1–6 · first ambient copilot live by week 2

1
Weeks 1–2
Tenant + identity baseline
Posture audit, conditional access, SCIM lifecycle, phish-resistant MFA.
2
Weeks 2–4
First copilot live
Grounded Copilot in one function (sales, legal or ops) with eval harness.
3
Weeks 4–6
Ambient + agentic rollout
Meeting intelligence, agent inbox, adoption playbook, exec scorecard.

FAQs

What buyers actually ask

Do you replace Microsoft / Google?

No — we orchestrate them. Copilot, Gemini and Apple Intelligence become surfaces; our agent OS is the conductor.

How do you stop Copilot leaking sensitive data?

Per-role grounding, region pinning, deny-lists, redaction in transit, and an eval harness that fails the build if a regression appears.

Is this just licence resale with consulting?

No. We are outcome-priced against knowledge throughput and adoption, not seats — refund-backed if we miss.

What about BYOD and contractors?

Device-as-API fleet handles signed device identity and just-in-time entitlement, so contractors get scoped access without a managed laptop.

Commission · P1 Sentient Workspace

Stand up Sentient Workspace in Weeks 1–6.

We'll respond within one business day with a scoping note, a fixed-price outcome contract, and a named principal cleared for your domain. Your details sync straight into our concierge queue.

• Outcome-priced — no T&M.
• Sovereign by default — your data, your region, your keys.
• Refund-backed if the contracted KPI isn't hit.