01 — Visibility
No reliable inventory
How many apps and flows are running in your tenant? Who created them? What data are they connected to? Most CIOs don't know the answer.
Offer — Power Platform Governance
Take back control
of your Power Platform.
Packaged governance audit covering Power Apps, Power Automate, Power Pages and Copilot Studio. Exhaustive inventory, risk analysis, budgeted remediation plan.
140
Evaluation points aligned with Microsoft's maturity model
4
Components audited: Power Apps, Automate, Pages, Copilot Studio
8 years
Of expertise dedicated to Power Platform
5+
Large industrial accounts equipped
The situation
Your tenant is slipping away from you.
Within a few years, Power Apps and Power Automate have changed the game. And created a blind spot for most CIOs.
02 — Risk
A silent exposure surface
Broad sharing, personal connections, missing DLP, orphaned flows. A technical and security debt building up without warning.
03 — Framework
No environment strategy
No Dev / Test / Prod, generic DLP, no ALM, makers left on their own. Innovation stalls, debt climbs.
04 — CoE
A dormant tool
The Microsoft Center of Excellence is installed but not used. Dashboards go unread, alerts aren't configured.
05 — Plan
No prioritization
You know you need to act. But where to start? With what budget? On what priority? How do you make the case to the board?
06 — Business
Pressure keeps rising
Business teams keep producing critical apps. Stopping everything isn't an option. You need to set a framework without breaking momentum.
The method
A four-step approach.
Four steps in 30 days. You leave with a factual assessment and a concrete plan.
STEP 01
Initialization
Scoping workshop, installation and configuration of the Microsoft Center of Excellence.
STEP 02
Analysis
Exhaustive inventory of objects, assessment against the Microsoft maturity grid (140 points).
STEP 03
Findings
Dashboards, audit summary, risk analysis. Deliverables ready to present to the board.
STEP 04
Remediation
Guidelines, environment strategy, DLP, 3-year budgeted roadmap.
Sample deliverable
A prioritized, budgeted roadmap.
At the end of the audit, you leave with a 5-phase action plan, each initiative sequenced in time and costed. A single view, ready to present to the board.
P0 0 – 2 months
Sponsor & scoping
Environment strategy
Minimal DLP
Freeze on external sharing
Default environment review
XXX k€
P1 2 – 6 months
Center of Excellence
ALM lifecycle
Advanced DLP strategy
Maker training
Naming convention
Service account management
XXX k€
P2 6 – 12 months
Portfolio clean-up
Reference documentation
Custom connectors
Power Pages & GDPR audit
Copilot Studio monitoring
Removal of dormant apps
XXX k€
P3 Year 2
Maker community
Training plan
Platform monitoring
Power Platform IAM
Certified app catalog
Low-code incident playbook
XXX k€
P4 Year 3
Maker certification path
Mentorship program
Periodic sharing review
Managed Dataverse capacity
XXX k€
Must Have
XXX k€ excl. VAT
Critical initiatives — non-negotiable baseline
Should Have
XXX k€ excl. VAT
Recommended initiatives — maturity & adoption
Total 3-year horizon
XXX k€ excl. VAT
Of which XXX k€ committed in year 1
Illustrative example — the actual roadmap is built based on your context, your current maturity level, and the risks identified.
The scope
A complete Power Platform audit.
The audit covers every component of your tenant, including the ones nobody thinks to check.
Power Apps
Canvas and Model-Driven. Inventory, sharing, connections, complexity and orphaned apps.
Power Automate
Cloud flows and desktop flows. Triggers, connectors, inactive or orphaned flows.
Published sites, authentication levels, exposed Dataverse tables, security roles, GDPR compliance.
Copilot Studio
Agents and distribution channels, knowledge sources, topics, moderation, Power Automate integration.
Standard, premium and custom connectors. Actual usage and DLP policies in place.
Strategy, typology, Dataverse capacity, licensing. Installation and operation of the CoE Starter Kit.
Client testimonial
The key word to avoid chaos and capture the full value of low-code is governance. And at Kem One, we work with KALIFY on exactly that.Maxime DuprezCIO at Kem One — President of ADIRA
The plans
Three plans, a clear scope.
A recommended positioning based on the size of your organization. The final plan and investment are refined during a qualification call, based on your actual context.
Starter
Recommended for up to 500 users
Know what's running in your tenant, and where to start.
Inventory & assessment
- Installation and configuration of the CoE Starter Kit
- Complete inventory of objects (XLS)
- Summary dashboard of the current state
- Access to CoE dashboards (Power BI)
Findings & guidelines
- Initialization workshop and findings workshop
- Audit summary (PPT)
- Guidelines — key corrective actions
Business
Recommended for 500 to 5,000 users
Understand usage, secure the tenant, launch remediation.
- Everything in Starter, plus:
Usage analysis
- IT and Maker usage questionnaires (Forms)
- 140-point assessment grid (XLS)
Security & governance
- Environment strategy + standard DLP
- Listing of security settings
- Automated alert on new object creation
Action plan
- Remediation plan (actions + budget)
Enterprise
Recommended beyond 5,000 users
Steer governance, convince the board, hold a 3-year trajectory.
- Everything in Business, plus:
Risk analysis
- Quantified risk analysis (PPT)
Executive decision-making
- Executive presentation for CIO / board
Advanced security
- Custom environment strategy workshop
- Custom DLP based on your usage
Strategic plan
- Advanced remediation plan — 3-year roadmap
Good to know — the positioning is indicative. A company with 3,000 users and a very mature environment may fall under the Enterprise plan, and vice versa. The final choice is confirmed during the qualification call.
The details
Comparison table.
The exact scope of each plan, deliverable by deliverable.
| Deliverables and workshops | Starter | Business | Enterprise |
|---|---|---|---|
| Initialization | |||
| Initialization workshop | ✓ | ✓ | ✓ |
| Installation and configuration of the CoE Starter Kit | ✓ | ✓ | ✓ |
| Usage analysis | |||
| IT usage questionnaire (Forms) | — | ✓ | ✓ |
| Maker usage questionnaire (Forms) | — | ✓ | ✓ |
| Current-state analysis | |||
| Analysis of environments, objects and settings | ✓ | ✓ | ✓ |
| Complete inventory of objects (XLS) | ✓ | ✓ | ✓ |
| Summary dashboard of the current state | ✓ | ✓ | ✓ |
| Access to CoE dashboards (Power BI) | ✓ | ✓ | ✓ |
| Microsoft maturity analysis | ✓ | ✓ | ✓ |
| 140-point assessment grid (XLS) | — | ✓ | ✓ |
| Power Pages | |||
| Inventory of published Power Pages sites | ✓ | ✓ | ✓ |
| Analysis of authentication levels and anonymous access | ✓ | ✓ | ✓ |
| Review of exposed Dataverse tables and security roles | — | ✓ | ✓ |
| GDPR and cookie compliance analysis | — | — | ✓ |
| Copilot Studio (Chatbots) | |||
| Inventory of agents and distribution channels | ✓ | ✓ | ✓ |
| Analysis of knowledge sources | — | ✓ | ✓ |
| Review of topics, moderation and Power Automate integration | — | ✓ | ✓ |
| Usage guidelines and agent publication framework | — | — | ✓ |
| Risk analysis | |||
| Quantified risk analysis (PPT) | — | — | ✓ |
| Findings | |||
| Findings workshop | ✓ | ✓ | ✓ |
| Audit summary (PPT) | ✓ | ✓ | ✓ |
| Executive presentation for CIO / board (PPT) | — | — | ✓ |
| Corrective actions | |||
| Guidelines — key corrective actions | ✓ | ✓ | ✓ |
| Environment strategy + standard DLP | — | ✓ | — |
| Environment strategy + custom DLP | — | — | ✓ |
| Listing of security settings (XLS) | — | ✓ | ✓ |
| Remediation plan | — | ✓ | — |
| Advanced remediation plan (3-year roadmap) | — | — | ✓ |
| Automated alert on new object creation | — | ✓ | ✓ |
They trust us
Large industrial accounts that structured their Power Platform governance with KALIFY.
Why KALIFY
A firm led by a former CIO, dedicated to governance.
We know both sides of the desk: the one that has to defend the budget, and the one that has to hold the line on security. We speak board as fluently as we speak DLP.
20 years
Of IT experience
Firm founded by a former CIO. A deep understanding of client-side challenges and board-level language.
8 years
On Power Platform
Technical and functional mastery of Power Apps, Power Automate, Dataverse and the CoE Starter Kit.
100 %
Governance-focused
One of the few French firms positioned specifically on governance, not on staffing.
5 +
Large accounts
Recurring engagements in industry and engineering, validated by demanding decision-makers.
Contact
Ready to take back control
of your Power Platform?
Let's talk for 30 minutes to qualify your context and identify the plan suited to your tenant.
Prices excl. VAT, excluding any travel costs · KALIFY · Dedicated Power Platform team