Approved AI for staff
Claude Enterprise or Microsoft Copilot, signed in with work accounts and managed on laptops and phones with Microsoft Intune.
AI Control by GDS Technology
Let your team use AI. Keep control of what it touches.
Staff are already using AI, approved or not. Blocking it all doesn't work. We give your people AI you approve, block the rest, keep sensitive data out of AI tools, and limit what AI agents can do on your devices. Then we run it for you and give you the evidence your insurer asks for.
- Microsoft partner and CSP
- ThreatLocker partner
- Set up and run by a local team
Four layers
Control which AI runs, what it can touch, and what data it sees
Shadow AI found and blocked
Microsoft Defender for Cloud Apps shows which AI apps your staff use. We approve the right ones and block the rest on your devices.
AI apps and agents, deny by default
ThreatLocker Zero Trust AI Control, with Allowlisting and Web Content Control: only approved AI runs, and AI agents get only the files, systems and network access they need.
Sensitive data kept out
Microsoft Purview stops sensitive information being typed into supported consumer AI sites in Microsoft Edge, with data loss prevention across Microsoft 365.
Packages
Built on the Microsoft licences you already have
Each package is the Microsoft licence it runs on, plus the GDS AI Control service: setup, ThreatLocker AI controls, monitoring, policy and quarterly evidence. Already licensed? We use what you have and add only what's missing.
Essentials
Approved AI for staff, and unapproved AI apps found and blocked.
Priced per user
Runs on Microsoft 365 Business Premium + Defender Suite
+ GDS AI Control service
- Approved AI managed on laptops and phones with Intune
- Find the AI apps staff use, and block the ones you haven't approved
- Deny-by-default control of AI apps and agents (GDS service)
Complete
Everything in Essentials, plus sensitive data kept out of AI.
Priced per user
Runs on Microsoft 365 Business Premium + Defender and Purview Suites
+ GDS AI Control service
- Everything in Essentials
- Stops sensitive data being typed into supported consumer AI sites in Microsoft Edge
- Data loss prevention and insider-risk alerts across Microsoft 365
Enterprise
The same protection for larger teams, with no 300-seat limit.
Priced per user
Runs on Microsoft 365 E5
+ GDS AI Control service
- Everything in Complete
- For organizations over 300 people
- Already on E5? Add only the GDS service
Microsoft licensing is quoted at Microsoft's current pricing when you order and follows any change Microsoft makes. Business Premium and its add-ons are limited to 300 users. Prices exclude applicable taxes.
How it works
From "what are people using?" to evidence you can show
- 1
AI Risk Assessment
What AI is in use, where data could leak, and what your licences already cover. $495, credited if you go ahead.
- 2
Policy and approved AI
A short AI use policy, and the assistant your staff are allowed to use.
- 3
Controls on
We switch on the controls in warning mode first, then block once your team is used to the approved tools.
- 4
Run and report
We monitor, tune and handle exceptions, and send the evidence your insurer and customers ask for.
FAQ
AI Control questions
Do we have to move to Microsoft 365 E5?
No. Most small and mid-sized businesses use Microsoft 365 Business Premium with the Defender and Purview add-ons, which cover the same AI controls for up to 300 users. If you already have E5, you only add our service.
We use Google Workspace or Microsoft 365 E3. Can we still do this?
Yes. We can add browser-level controls for AI sites and keep ThreatLocker for AI apps and agents on your devices. The AI Risk Assessment recommends the right mix for your licences.
Will this block ChatGPT, Claude and the rest?
Only the ones you don't approve. The point is to give staff AI they're allowed to use, then block or warn on everything else, with your approved assistant as the alternative.
What does Microsoft's data protection cover today?
In Microsoft Edge it checks text typed into a list of supported consumer AI sites, such as ChatGPT, Gemini and DeepSeek. It doesn't cover every AI site or uploaded files, so we pair it with blocking unapproved AI and with ThreatLocker controls on the device.
Is ThreatLocker priced separately?
No. ThreatLocker AI controls are part of the GDS AI Control service, so you get one price per user for the service on top of your Microsoft licences.
How does this help with cyber insurance?
Insurers increasingly ask how you control AI. You get a written policy, a record of the AI in use, what was blocked, and who acknowledged the policy, ready for applications and renewals.
Why businesses trust us
Backed by GDS Technology
Every platform on this site is sold, set up and supported by GDS Technology, a managed IT and cybersecurity partner for businesses with 10 to 250 employees.
MSP Titans of the Industry2026 Nationwide finalist · 2025 Southeast finalist
Galactic certifiedIncident Responder and Compliance Consultant
Microsoft partnerCloud Solution Provider (CSP)
Proud member of
As featured in
GDS has been an exceptional partner for me in the commercial real estate market. They have a unique understanding of our needs, and the team is always available to address any issues quickly even if the location is out of state.
- Locally owned and operated in Norcross, GA
- US-based team
- Microsoft partner and Cloud Solution Provider (CSP)
- Offices in Norcross, Midtown Atlanta and Indianapolis
Find out what AI your staff are using
Start with the AI Risk Assessment: real evidence of AI use and data exposure, and the package that fits the licences you already have.
Microsoft, Microsoft 365, Intune, Defender, Purview and Copilot are trademarks of Microsoft. ThreatLocker is a trademark of ThreatLocker, Inc. Claude is a trademark of Anthropic, PBC. GDS Technology is a Microsoft partner and a ThreatLocker partner; product availability and features are set by each vendor.