Know what AI can reach in your company, starting with your ERP.
AI is arriving in your company faster than anyone is keeping track of it, and some of it now works inside your ERP. A DES AI Governance Review™ shows your leadership where AI is in use, what it is able to do, and where company information goes. You finish with a short, practical list of what to keep, change or tighten.
One review, three starting points
A DES consultant leads each review and scopes it with you in a first conversation. Start with the question that matters most to you today, or take all three together.
Agent Access Review™
Can an AI agent in our ERP do more than it should?
In recent F&O versions (10.0.47, and the latest updates to 10.0.46 and 10.0.45), Microsoft's connection that lets AI agents work inside F&O is on by default. Microsoft Copilot Studio and a few other Microsoft tools are allowed by default, and an administrator adds any others, such as Claude. An agent from an allowed platform can create, read, update and delete F&O data and run actions, limited only by the security roles it holds. Microsoft supplies the switches. It does not tell you whether each agent holds only the access it needs, whether segregation of duties still holds when an agent can post, approve or change master data, or what you can see afterward about what an agent did.
We review one F&O environment: which agent platforms are allowed and who decided that, the roles each agent holds, any segregation-of-duties conflicts, and the gaps in what you can see afterward. You receive a short list of findings and fixes.
AI Inventory and Ownership Review™
Where do we use AI, and who is responsible for it?
Many leadership teams cannot yet answer that, or say what the company's AI policy is. We find where AI is in use, give each use an owner and a review date, and set a simple policy on what information may go where. A quarterly check-in keeps the list current. It starts from what you already have in place.
AI Information Custody Review™
Where does our company information go when people use outside AI?
Employees, vendors and consultants use tools such as ChatGPT, Claude and Gemini, sometimes on personal accounts. The question is custody: which provider receives your information, under what terms, whether it is kept, and who it is passed on to. We classify your information, decide which kinds may go to which kinds of destination, check each AI in use against that, and separate what you can verify from what a vendor only promises.
The result is a set of questions for your own counsel. It is not legal advice.
How it works
It is a consultant-led review, not a software product: a conversation to scope it, the review itself, and a short written summary of what we found and what to do next.
Start with a conversation.
Tell us where AI is showing up in your company, or whether your F&O system is on a recent version, and we will talk through which review fits.
Talk with DES