Stepping outside the ring

A guide for small organisations on Microsoft 365, Copilot and Outlook

Version 2, 10 November 2026 · My Digital Sovereignty Ltd

Most small organisations put their trust in the provider they already use and may even expect it to supply protection and sovereignty. A provider can protect its own platform. It cannot also be the independent witness of what happened on it. This guide adds that witness around the tools you already use, starting this week, so that your records, approvals and AI activity are held, gated and provable on your own terms. These layers may not stop a bad actor getting in, but they make what passes through them accountable: every action that passes through them, by a person or an AI agent, leaves a signed record of what was done and with whose approval, which anyone can check afterwards. That is what public trust depends on. If you would like the background first, Why trust matters sets out the eight risks an ordinary organisation is likely to meet.

You do not have to leave Microsoft to start. The protection comes from how the layers work (gates, separate approvers, signed and dated records), not from policy documents or good intentions.

Five moves

Move	You keep	You add	What changes
Move1. Know who holds the keys	You keepYour current provider	You addFour questions, in writing: who owns the provider, which laws reach your data, who holds the encryption keys, and what is its plan for post-quantum encryption.	What changesYou choose with facts, and you prefer signatures that can be checked without the provider.
Move2. Decide what agents may do, before they act	You keepCopilot and any other AI assistant	You addVillage Gateway, for agents that ask before they act: your policy answers allow, hold or deny, with a spend limit for each agent. An allowed action gets a single-use permit that lasts at most five minutes. The MIO° Conduct Record is a dated, signed register of which agents exist and what each may do.	What changesA different approver (the Village owner or a moderator) releases held actions, you can stop every decision at once, and each decision has a signed receipt.
Move3. Put a gate on outbound email	You keepOutlook, Exchange, Gmail or any SMTP mail service	You addEmail Decision Record. Your rules decide each email from a person or an AI agent before it goes: send, hold for a named approver, or refuse. Rules cover new or outside recipients, attachments, blind copies and how many people it reaches. The approver sees the exact message and attachments, and the release is valid only for what they saw.	What changesBy default, the owner of the agent that proposed an email cannot approve it, and you can require two approvers. Every decision leaves a signed, time-stamped receipt, chained to the one before, that you can check years later without asking us. Your mail does not move.
Move4. Hold your own record	You keepSharePoint, OneDrive, Outlook archives	You addA signed record you hold apart from your provider. Each change to the invoices, minutes, decisions and posts you keep in the Village is signed under your Village's key as it is made, and held in New Zealand or the EU. An outside time-stamp authority sees only a fingerprint. For supply chains, Provenance lets each party sign its own records.	What changesAnyone you hand a record to can check, in a browser, offline and with no account, that it is unchanged since it was signed.
Move5. Keep a signed money trail	You keepYour ledger, if you use accounting software	You addAttested Accounts, inside the Business Village: every change to an invoice, quote or expense is signed as it is written.	What changesYour accountant, bank or auditor can check an invoice's history offline from a bundle.

When you are ready to move more

The Village is the platform these layers sit in, hosted in New Zealand or the EU with each organisation's data kept separate: chat, news, events, polls, documents edited in the browser, e-signature, video calls, invoicing and a help assistant that can run on local AI only. It does not replace everything Microsoft 365 does (there is no hosted mailbox and no forms builder), so most organisations start with the layers above and move work across when it suits them.

Join the Beta

Alongside Microsoft is a private Beta Village for people starting this journey. An AI assistant, clearly labelled, answers your questions about the five moves above. Every answer names the page or record it comes from, and where the assistant has no answer it says so. Questions it cannot answer are passed on to the Village owner without your name or account, so the answer can be added for the next person. Leave names out of your question. The Village also holds a reading library: the guide and the product pages. Access is by invitation during the Beta. Open the Beta Village if you hold an invitation, or ask for one at mysovereignty.digital/contact.html.

Start this week

Close the easy doors. Two-step sign-in everywhere, and a second channel (a call-back on a known number) for any request to move money or change bank details.
Name your agents. List every AI assistant and automation in use and write one line on what each may do. That list is your first mandate.
Pick one record stream that matters most (board decisions, invoices, export documents) and seal it first.
Check one suspicious email. Save it from Outlook as .eml and upload it at mysovereignty.digital/scam-check.html. No account is needed. Nine checks run on the message itself (sender and authentication results, mismatched names, lookalike domains, link and attachment types); a tenth, link reputation, is shown as not checked. Nothing is fetched, no attachment is opened, and the result is kept for 24 hours.

What you can then show an outsider

Who proposed an action, who approved it, which rule applied and when, with a record anyone can check without asking your systems or ours. A check shows that a record is unchanged since it was signed, and when. It shows who signed it once the signer's published key is pinned; the signing keys are held by My Digital Sovereignty Ltd today. The signature says nothing about whether the content was true. The layers work alongside your existing mail security and backups, and they are available by arrangement, with evaluation by invitation. Each component's maturity is graded openly at amiomega.digital/status.