What a pasted prompt can expose
A fictional bank tests the data boundary before access widens.
Coming
See every demonstrationFINANCIAL SERVICES | SAMPLE WORKFLOW
Give an AI agent a boundary the risk team can inspect.
The CEO wants Copilot this quarter, compliance wants a record and your name is on the incident if an agent acts on an assumption. At fictional Hartwell Trust Bank, an agent proposes a policy exception, a named approver checks the exact action before any change, and the decision is recorded for the examiner.
01 Source02 Boundary03 Human decision04 Evidence
HOW IT WORKS
The control path in practice.
- Receive a policy question with its business owner.
- Restrict retrieval to approved records and the requester's access.
- Show the proposed exception and its evidence to a named approver.
- Record the decision and monitor the agent after release.
THE WOUND
How do you say yes to the CEO on Copilot without your name on the incident?
By saying yes in a tested order: scope the pilot group, test what its people can already see, fix what the test finds, then widen, with each step recorded.
The compliance officer wants a record, the CFO wants a number and the CEO wants the quarter. The one-page Tested or Assumed decision record gives all three the same page to read, in your words.
THE MICROSOFT INSIGHT
What shows you the oversharing before Copilot does?
Microsoft Purview Data Security Posture Management for AI, which assesses the most used SharePoint sites for data risk every week and reports AI interactions that touch sensitive data.
Microsoft Purview Data Security Posture Management for AI runs a weekly data risk assessment of the 100 most used SharePoint sites without activation and reports AI interactions that touch sensitive data. (Microsoft Learn, checked Oct 31, 2026)
Read the weekly assessment before the pilot and the oversharing shows up in a report. Read it after and it shows up in a Copilot answer to the wrong person.
THE SAMPLE WORKFLOW
What does a governed agent look like at a bank?
At fictional Hartwell Trust Bank, an agent proposes a policy exception and a named approver checks the exact action before any change, with the decision recorded.
- Receive a policy question with its business owner.
- Restrict retrieval to approved records and the requester's own access.
- Show the proposed exception and its evidence to a named approver.
- Record the decision and monitor the agent after release.
THE EVIDENCE
What does the examiner see?
The permission row, the approvals and the outcome records, beside the communication compliance classifiers that map to the obligations the firm already reports against.
Microsoft Purview Communication Compliance ships trainable classifiers for money laundering, stock manipulation, regulatory collusion and unauthorized disclosure, mapped to obligations such as FINRA rules and the Securities Exchange Act. (Microsoft Learn, checked Oct 31, 2026)
With the record, the exam question has a page. Without it, the exam question has a project.
THE FIRST RUNG
Where does an IT director in wealth management start this quarter?
With the free Copilot readiness check, then the AI Data Readiness and Agent Governance Assessment, read-only, then a scoped pilot that can start before the cleanup finishes.
Hartwell Episodes 2 and 3 in the demos section show the same sequence on fictional data: client data pasted into a public tool and blocked on a managed PC, then external sharing labeled and reviewed.
AFTER TWO WEEKS
What will be working after two weeks?
- Read-only discovery of the tenant is complete and the posture report is in your hands.
- The pilot group is named and its access has been tested.
- One page separates tested from assumed for the compliance officer, the CFO and the CEO.
- You hold the remediation and pilot scope with its quote as a written decision.
HONEST ABOUT LIMITS
What this does not do yet
It does not stop a person typing an account number into a prompt. Blocking a Copilot or Cowork response when the typed prompt contains chosen sensitive information types is in preview and rolling out to tenants. (Microsoft Learn, checked Oct 31, 2026, preview) So the controls that are generally available run first: labels and data loss prevention (DLP) on the files, scoped access, and a person at the gate.
It does not make the regulatory attestation for you: the evidence is produced, your compliance officer owns the statement.
It does not widen Copilot to the firm until you decide in writing, wave by wave.
THE ONE THING TO REMEMBER
Yes to the CEO, in a tested order, with a one-page record for the people who will judge it.
Said another way: the pilot can start before the cleanup finishes when the pilot group's access is tested first.
Said a third way: own a tested decision, never an assumption.
SHOW YOUR WORK
See the control path on a fictional bank.
DIRECT ANSWERS
Questions before you decide.
Can a Copilot pilot start before the file cleanup is done?
Yes, when the pilot group's access is scoped and tested first. The cleanup then runs where the pilot proves it is needed, which is the Decision-Gated Delivery sequence.
What do we show the examiner?
The permission row per agent, the approvals, the outcome records and the Purview reports, in the format agreed with your compliance officer before the pilot.
Is Hartwell Trust Bank a client?
No. It is a fictional bank used in every episode and example so that no client is named and no result is implied.
Which Microsoft play does this map to?
Agent 365 and Purview, with Microsoft-funded engagements where your tenant qualifies. Eligibility is checked before anything appears in a proposal.
How is it priced?
Quoted after a scoping call. The assessment is read-only and scoped separately from the pilot and the cleanup.
NEXT STEP
Start with a boundary you can explain.
Choose a focused check, or speak with the team about the workflow you need to improve.