Shadow AI at the first gate
Hartwell Trust Bank checks an outside AI use case with fictional data.
Coming
See every demonstrationABOUT SIMPLICITY IT
A Managed Intelligence Provider for the Microsoft estate.
We operate the intelligence layer of a business with the same care a managed IT provider gives its computers. Named engineers set the security boundaries, build useful workflows, and keep people in control of consequential decisions.
01 Source02 Boundary03 Human decision04 Evidence
OUR ROLE
Become the person who made AI safe enough to say yes to.
Simplicity IT helps the people accountable for AI in regulated firms make a tested decision, never an assumption. As a Managed Intelligence Provider, we install controls, build useful workflows and keep a named person at the production approval point.
We are a New York-based managed AI and security firm serving clients across the United States and abroad. Our engineers hand over an operating record and a runbook your team can use.
See how our engineers workTHE FIRM
Who is Simplicity IT?
A New York-based managed AI and security firm serving clients across the United States and abroad, founded and led by Ameer Abdur-Razzaaq, that has delivered Microsoft infrastructure and security work since 2011 and now runs the intelligence layer of regulated mid-market firms as a Managed Intelligence Provider.
The firm is from Harlem, works inside the Microsoft estate, and sells one thing in three motions: governed AI, managed AI and agent operations, and managed security. Ameer's work on enterprise AI governance has been featured in Forbes; the plain-English version of that seat is on this page.
THE SEAT
What does enterprise AI governance mean in plain words?
Deciding, before an AI system acts, what it may see, what it may do on its own, who approves the rest, and how you would prove all of that to someone who was not in the room.
It is not a policy document. It is a permission row per workflow, a named approver, an evidence record, and a dated register of what Microsoft actually ships, which is the work Simplicity IT does inside your tenant.
THE MICROSOFT INSIGHT
Why did the firm bet on Microsoft Agent 365?
Because it is the control plane for agents built on Microsoft platforms or acquired from vendors, and it runs through the admin center, Entra, Defender and Purview that regulated firms already operate.
Microsoft Agent 365 became generally available for commercial customers on May 1, 2026, is licensed by user rather than by agent, is included in Microsoft 365 E7, and is sold as an add-on to Microsoft 365 E5, A5 and Business Premium or to the Defender Suite with the Purview Suite. (Microsoft Learn, checked Nov 4, 2026)
Govern agents through the tools the security team already runs and the estate has one inventory. Govern them through a parallel product and the estate has two.
THE METHOD
What is Decision-Gated Delivery?
The way every engagement runs: read-only discovery, findings that separate tested from assumed on one page, a pilot before any wave, rollback agreed before anyone flips a switch, and your written decision closing each phase.
- Discover read-only, change nothing.
- Write the one-page Tested or Assumed record in your words.
- Pilot before waves, rollback written first.
- Close each phase with your written decision and quote the next.
THE PROOF
How does the firm show its work without naming clients?
With fictional organizations, Hartwell Trust Bank, Contoso Builders, Harbor Point Tower B and Corliss Bay Construction, in 90-second demonstrations rendered on sample data, and with every Microsoft claim dated and sourced to Microsoft Learn.
Simplicity IT is a Microsoft Solutions Partner. Partner designations and funding options are verified for each engagement before they appear in a proposal, and no certification the firm does not hold is claimed anywhere on this site.
AFTER TWO WEEKS
What will be working after two weeks?
- You have had a scoping call and a one-page summary of what we heard, in your words.
- Read-only discovery of the agreed scope is complete and nothing has changed.
- The Tested or Assumed record is in front of you with the first permission rows.
- You hold the next scope and its quote as a written decision.
HONEST ABOUT LIMITS
What this does not do yet
It does not claim that AI is safe in general. Microsoft 365 Copilot returns only content the signed-in user already has at least view permission to see, so anything shared too widely is findable from day one. (Microsoft Learn, checked Oct 31, 2026) Safe to use means tested inside your tenant, against your permissions, with a person at the gate, and that is the only sense in which the firm uses the word.
It does not sell you software: Simple Growth, SimpleOS Reach, SimpleOS Delivery, Simple Time, SimpleOS Desk, Simple Merge and Simple Council are Simple Intelligence Group products with their own product pages, separate from Simplicity IT services.
It does not publish prices or client names: engagements are quoted after a scoping call and every example on this site is fictional.
THE ONE THING TO REMEMBER
A Managed Intelligence Provider runs the intelligence layer of a business the way a managed IT provider runs its computers.
Said another way: governance, security and workflow automation under one roof, so AI is safe to use and pays for itself.
Said a third way: your name goes on a tested decision, never on an assumption.
SHOW YOUR WORK
See the control path on a fictional bank.
DIRECT ANSWERS
Questions before you decide.
Where is Simplicity IT based?
New York City. Clients are across the United States and abroad; the work is delivered remotely inside each client's own Microsoft tenant, and on site only when the work needs it.
How long has the firm been doing this work?
Microsoft infrastructure and security delivery since 2011. AI governance, managed AI operations and Agent 365 work are the newest layer under the same Decision-Gated Delivery method.
Is Simplicity IT a Microsoft partner?
Yes, a Microsoft Solutions Partner. The exact designations on the Partner Center list are the only ones named, and they are verified for each engagement before they appear in a proposal.
What is the relationship with Simple Intelligence Group?
Separate companies. Simple Intelligence Group builds the SimpleOS products; Simplicity IT delivers services on Microsoft and uses those products where a client chooses them.
How do I reach the team?
Book a scoping call from any page, or start with a free four-question check. Every engagement is quoted after the call, and discovery is read-only.
NEXT STEP
Start with a boundary you can explain.
Choose a focused check, or speak with the team about the workflow you need to improve.