Your team gets the tools. You get the controls.
Your staff are using AI right now. Most of them are doing it on accounts they bought themselves, with company files in the chat history, on a login you cannot disable.
Already a client? Ask your account manager or primary technician.
This is not a policy problem
You can write a memo telling people not to put client information into ChatGPT. Some of them will read it. The ones who do not are invisible to you, because their account is not in your Microsoft tenant, does not appear in any report you receive, and does not switch off when they hand in their badge. It is the same gap the rest of our security work is built to close, applied to a tool nobody put on the asset list.
Every one of those accounts is a copy of your business sitting somewhere you have no claim to.
It is an access problem. Access problems have solutions.
What a managed workspace actually changes
-
Access dies when the login dies
Personal AI accounts sit outside your Microsoft or Google tenant, so there is nothing to switch off at offboarding. A managed workspace signs in through your existing identity. The checklist we already run when someone leaves now covers AI too.
-
The door closes
We verify your domain so new personal accounts cannot be created on it. Anyone signing up with a company address lands in your workspace instead of starting another account you will never see.
-
Connectors are decided, not discovered
Claude and ChatGPT both connect to SharePoint, Google Drive, Gmail, Slack and GitHub. On a personal account, any employee can point one at your internal files and you would never know. We turn connectors on deliberately and scope them to what each team actually needs, so internal documents do not end up flowing into systems you do not own.
-
Your data is not training data
Business plans exclude your content from model training by default. Free and personal subscriptions do not carry the same terms, which matters for anything client-confidential that has already been pasted into a chat window.
Three steps, usually inside a week
-
We stand it up
Business workspace created on your domain, DNS verified, billing consolidated onto one invoice you already recognize.
-
We wire it to your logins
Single sign-on through Microsoft 365 or Google Workspace, connectors scoped, personal signups on your domain blocked.
-
We keep it current
Seats added and removed alongside your staff, plus a monthly report of who is actually using it so you stop paying for the ones who are not.
Pricing
-
$49
per person / month
One platform
Claude or ChatGPT. Setup included.
-
$85
per person / month
Both platforms
One workspace on each, managed together.
-
$145
per person / month
Power seat
For the handful of people who hit usage limits.
Domain Lock, for teams who do not want AI in the building at all
Not every business wants its staff using these tools, and saying so does not stop anyone. We stand up the smallest workspace your domain allows, verify it, and block new personal accounts from being created on your email addresses. Nobody is issued a seat, and no seat can be added without coming through us. If you change your mind later it converts to a managed plan without starting over.
Blocking both Claude and ChatGPT runs $120 a month. Locking one and leaving the other open accomplishes little, so most clients take both.
Managed plans carry a $295 monthly minimum, which covers up to six people on one platform and includes workspace setup, domain verification, single sign-on into your Microsoft or Google tenant, connector scoping, ongoing seat management and the monthly usage report. Past six people, per-person pricing applies. Usage beyond included limits is passed through at cost plus 20%, capped at a number you approve in writing before we enable it.
Fair questions
We already have Copilot.
Different problem. Copilot lives inside Microsoft 365. The accounts we are talking about are on chatgpt.com and claude.ai, bought on personal cards. Pull your last quarter of expense reports and search for them; most owners are surprised by the count.
Can we not just tell people not to use it?
You can, and some will listen. The ones who do not stay invisible. A managed workspace makes the compliant path the easy path, which works considerably better than a rule nobody audits.
Why not just buy the business plan ourselves?
You can. The license is the cheap part. Domain verification, single sign-on into your tenant, connector scoping and ongoing seat management are the work, and they are the work that quietly does not get done when it is a side task for whoever happens to hold the admin password.
What if we want to leave?
The workspace is in your name, on your domain, and the data in it is yours. What we hold is the administrator role and the payment method on file: we pay the vendor and rebill you on the invoice you already get from us. If you want to leave, we take our card off the account and hand the administrator role to whoever you name. The workspace and its history stay exactly where they are, because they were never ours to move.
Which one should we use, Claude or ChatGPT?
Depends on the work. We will ask what your team does most and make a recommendation on the call. Plenty of clients run both, which is what the $85 tier is for.
We do not want our staff using AI at all.
Then Domain Lock is the one to look at. We block signups on your domain and issue nobody a seat, which turns a policy nobody can enforce into a setting that enforces itself. It costs less than one managed seat.
What about existing accounts people already have?
We block new ones from being created on your domain and invite the existing users to move over voluntarily, bringing their history with them. Consolidating accounts by force requires a much larger enterprise agreement, and we will tell you honestly if you are at the size where that is worth considering.
Who this fits
Small businesses and nonprofits between roughly five and a hundred and fifty people, already running Microsoft 365 or Google Workspace, where staff have started using AI on their own and nobody is managing it. If you handle client financial records, health information, legal files or donor data, this moves faster up your priority list.
If you are under five people, individual subscriptions are probably fine and we will tell you so. And if you have decided AI has no place in your business, Domain Lock makes that decision stick without putting a single seat in anyone's hands.
Tell us your headcount and we will tell you what it would cost.
We will scope it against your tenant and send back a number, no obligation.
Already a client? Reach out to your ROI account manager or primary technician.