Virtual Consultants Australia · AI Security & Governance

AI Security & Data Governance Solution: Sensitive Data Discovery, Labelling & Quarantine

Know your data. Lock down what matters. Make AI safe to adopt.

Before Copilot and AI agents start reading everything, find out where your sensitive data really lives. We discover it, label it, lock it down and hand you the evidence your board and auditors ask for.

ISO logoISO/IEC 42001 alignedNIST logoNIST AI RMFMicrosoft Purview logoMicrosoft Purview syncShadow-AI discovery
View pricingSee the data pipeline

Book a sensitive-data exposure assessment

Tell us about your data estate and AI plans and we will show you where sensitive data sits today.

    What it is

    Find what matters, label it and move it somewhere safe

    An enterprise data-governance platform that finds sensitive data, labels it, and moves it somewhere safe, before AI tools, copilots and agents can expose it.

    01

    Scan

    Structured sources and unstructured data (file shares, SharePoint/OneDrive, Google Drive, email archives, S3/Blob, chat exports) for critical data elements and sensitive content.

    02

    Label

    Sensitivity labels for PII, financial, health, IP and credentials using policy-based and ML classification, synced with Microsoft Purview.

    03

    Quarantine

    Move sensitive items to secure locations with access controls, retention rules and a full audit trail.

    04

    AI governance

    AI system inventory, risk register, impact assessments, policy library, model and vendor risk, and shadow AI discovery.

    05

    Framework mapping

    ISO/IEC 42001, ISO/IEC 27001, NIST AI RMF and NIST CSF, supporting Privacy Act 1988 / Australian Privacy Principles alignment.

    06

    Board-ready reporting

    Dashboards for the board, CISO and DPO, and evidence packs for auditors.

    Positioning note: The platform and services support alignment with these frameworks. They do not constitute certification. Certification remains with accredited certification bodies.

    Live pipeline

    From unknown data to audit-ready evidence

    Watch how sensitive data is discovered, labelled, locked down and reported. Each step lights up as it runs.

    🔍ScanSharePoint, Drive, S3, email
    🧬ClassifyPolicy rules plus ML
    🏷️LabelPurview label sync
    🔒QuarantineSecure vault, audit log
    🤖AI risk checkInventory and shadow AI
    📋EvidenceBoard and auditor packs

    Alignment support, not certification

    AI security and data governanceSensitive data foundAuto-labelledAudit trail

    Frameworks and tooling

    Governance built on the standards regulators and auditors expect

    We map your controls to recognised frameworks and work with the security tooling you already run, so governance becomes evidence rather than paperwork.

    • Sensitive-data discovery before Copilot and AI agents index it
    • Labels and retention that follow the data
    • AI inventory, risk register and shadow-AI visibility
    Microsoft Purview logo
    Microsoft PurviewSensitivity labels and data protection
    ISO logo
    ISO/IEC 42001AI management system standard
    ISO logo
    ISO/IEC 27001Information security management
    NIST logo
    NIST AI RMF and CSFRisk and cybersecurity frameworks
    OWASP logo
    OWASP LLM Top 10Prompt injection and LLM risks
    EU AI Act logo
    EU AI ActRisk-based AI regulation mapping
    OAIC logo
    Privacy Act and APPsAustralian privacy alignment
    Langfuse logo
    LangfuseLLM observability and tracing
    Lakera logo
    Lakera GuardRuntime AI threat protection
    Credo AI logo
    Credo AIAI governance and risk platform

    Who it’s for

    Leaders preparing for Copilot or AI roll-outs, or facing audits

    Ideal buyer

    CISOs, CIOs, DPOs, risk and compliance leaders preparing for Copilot or AI roll-outs; organisations facing audits.

    Questions we start with

    • Do you know where sensitive unstructured data lives?
    • Who can access it today?
    • What happens when an AI assistant indexes it?
    • What does your AI inventory look like?

    Results we measure

    • Sensitive items found and remediated
    • Over-shared files reduced
    • Labelled-data coverage %
    • Time-to-audit-evidence
    • AI systems inventoried and risk-assessed

    Pricing

    Choose the plan that fits your organisation

    Each plan has a one-time setup fee and a monthly subscription covering hosting, monitoring, updates and support. Pay annually and get 2 months free. The full platform is built for businesses; sole traders and small practices can start with a lightweight plan.

    EssentialsProfessionalMost popularElite
    Setup (one-time)$990$2,490$4,900
    Monthly subscription$79$199$390
    Ideal forSole traders and consultantsSmall practices (accountants, legal, clinics)Professional firms with client-data duties
    Data sources scanned1Up to 3Up to 6
    Data volumeUp to 100 GBUp to 500 GBUp to 2 TB
    Sensitive-data discoveryPII and financial patternsPlus health and credential patternsPlus custom client-specific patterns
    LabellingReport onlyAutomated labellingAutomated labelling and policy rules
    Quarantine to secure locationManual guidanceAutomated, 1 secure vaultAutomated, role-based vaults, audit log
    AI-use policy and risk checklistTemplateTailored policyPolicy plus AI tool inventory and risk review
    ReportingOne-off reportQuarterly reportMonthly report and annual review
    Support and SLAEmail, 2 business daysEmail and chat, 1 business dayPriority, 4 business hours
    Business StandardBusiness PremiumMost popularEnterprise
    Setup (one-time)$24,900$59,000From $120,000
    Monthly subscription$2,500$6,500From $14,000
    Ideal forSMEs, up to 250 staffMid-market, up to 2,000 staffLarge enterprise and regulated entities
    Data sourcesUp to 5Up to 20Unlimited, hybrid and multi-cloud
    Data volumeUp to 5 TBUp to 50 TB50 TB+ (volume-tiered)
    Structured and unstructured scanning✔✔ with OCR and image/PDF analysis✔ plus code repositories, SaaS and data lakes
    Critical data element (CDE) catalogueUp to 25 CDEsUp to 100 CDEs with lineageEnterprise catalogue and lineage
    Classification and labellingPolicy-basedPolicy plus ML, Purview label syncCustom models, multi-label taxonomy
    Quarantine to secure locationsAutomated, 2 locationsAutomated workflows with approvals and restorePolicy-driven, multi-region, legal-hold aware
    AI governanceAI inventory and policy packPlus risk register, impact assessments, shadow-AI discoveryPlus ISO/IEC 42001 management-system build-out and vendor/model risk
    Framework mappingISO/IEC 27001, NIST CSFPlus ISO/IEC 42001, NIST AI RMFPlus custom control frameworks and audit-readiness programme
    Executive dashboardsQuarterly board packLive CISO / DPO dashboardsLive multi-entity dashboards, evidence packs
    Support and SLA99.9% uptime, 4-hr response99.9% uptime, 2-hr response99.95% uptime, 1-hr critical response, named TAM, 24×7 option

    All prices in AUD and exclude GST. Enterprise is “from” pricing; a scoped quote follows discovery. Third-party licences and cloud consumption are billed at cost plus handling. Minimum term 12 months for monthly subscriptions.

    FAQs

    Common questions

    Does this certify us against ISO/IEC 42001 or ISO/IEC 27001?

    No. The platform and services support alignment with these frameworks but do not constitute certification. Certification remains with accredited certification bodies.

    What kinds of data can you scan?

    Structured sources and unstructured data such as file shares, SharePoint/OneDrive, Google Drive, email archives, S3/Blob and chat exports.

    Does it work with Microsoft Purview?

    Yes. Labelling can sync with Microsoft Purview sensitivity labels, with Purview label sync included from Business Premium.

    Is there a plan for sole traders and small practices?

    Yes. The Solo Practitioner & Professional Practice plans suit sole traders, consultants, accountants, legal practices and clinics.

    Ready to make AI safe to adopt?

    Book a free assessment ↑