Home CUIckStart AI tiers

CUIckStart · AI

AI inside the boundary, on three tiers.

Every CUIckStart enclave is built AI-ready: Purview labels, DLP, and logging are on from day one. Three add-on tiers turn AI on, from approval flows to native agents to one Azure Government Foundry agent. All three stay inside GCC High.

CUIckStart AI · AT A GLANCE
Every enclaveAI-ready: labels, DLP, logging from day one
EnableFlows only
NativeEnable plus native agents
PremiumNative plus one Foundry agent
Stand-up, list$12,000 · $22,000 · $55,000
CloudGCC High · Azure Government for Premium’s agent
Web groundingOff, at tenant and agent
01 · The tiers

AI-ready by default. Three tiers switch it on.

Each tier builds on the one before it. The stand-up is inDirectIT’s list price; Microsoft and Azure are billed as pass-through and shown on their own line.

Flows only

AI Enable Enclave

Flows only. No Copilot Studio agents, no Copilot seats, no models on CUI.

Microsoft + Azure$0 incrementalper month
inDirectIT stand-up$12,000 list
Enclave licensingBusiness Premiumwith the Defender and Purview Suite
Ships
  • Approvals, Travel, and Invoice approval flows.
  • Gov-to-commercial metadata alert, optional.
  • Rules-only mail sort on one watched inbox.
  • DLP policy, shared request lists, three service mailboxes, runbook, and SSP language.

Built with SharePoint lists, Teams Approvals, and standard Power Automate connectors in GCC High.

Does not ship
  • Service Desk, RFP agent, or generative mail.
  • Foundry or Security Copilot.
FitFirst enclave; the ISSO wants motion without a chat surface.
Enable plus native agents

AI Native Enclave

Everything in Enable, plus three native agents, Copilot seats for named roles, and capped credits.

Microsoft + AzureAbout $830per month at GCC High estimated retail
inDirectIT stand-up$22,000 list
Enclave licensingMicrosoft 365 G5GCC High, in place of Business Premium
Year-one library refresh$4,500
Year-one customer cashAbout $36,500 liststand-up + refresh + Microsoft
Adds
  • Enclave Service Desk agent, on your enclave SharePoint site.
  • RFP Response agent, drafting from the approved-language library only.
  • Enclave Mail Filter across all three service mailboxes: rules only, an owned triage queue for what the rules can’t place, and template reply drafts a person sends.
  • Agents on the web channel with Microsoft Entra sign-in, embedded on your enclave SharePoint site. Copilot Studio in GCC High has no Teams channel.
  • 8 Microsoft 365 Copilot seats for named roles.
  • 1 Copilot Studio capacity pack (25,000 credits a month).
  • Azure Government pay-as-you-go as capped overflow, with per-agent credit caps.
  • A year-one quarterly library refresh.
FitBD and AP work live in the enclave; willing to seat the control-plane roles.
Native plus Foundry

AI Premium Enclave

Native plus one Azure Government Foundry agent and an operations layer.

Microsoft + AzureAbout $2,500per month at GCC High estimated retail
inDirectIT stand-up$55,000 list
Enclave licensingMicrosoft 365 G5GCC High, in place of Business Premium
Extra Foundry agentBy change ordernot unlimited
Adds
  • A Foundry project in Azure Government.
  • Generative mail triage: mail the Mail Filter rules mark unsure is classified in Azure Government, and a human still sends.
  • One production agent, chosen at kickoff: evidence agent, read-only CUI locator, or BD assembler with a human approval gate.
  • Dev and Prod Copilot Studio environments.
  • 20 Copilot seats and 2 Studio packs.
  • A 20-question evaluation set the agent must pass.
  • A monthly consumption report.
  • Optional inDirectIT AI operations retainer.
FitMulti-entity, factory, or already on Native.

Microsoft and Azure figures are planning totals at GCC High estimated retail; your tenant is quoted on its own. The CUIckStart enclave itself is priced separately on the pricing page.

02 · Side by side

What each tier ships.

CUIckStart AI tiers compared
ItemEnableNativePremium
Approvals flowIncludedIncludedIncluded
Travel flowIncludedIncludedIncluded
Invoice approval flowIncludedIncludedIncluded
Gov-to-commercial metadata alertOff until the ISSO signsOptionalOptionalOptional
Rules-only mail sortOne watched inboxIncludedIncludedIncluded
Enclave Service DeskNot includedIncludedIncluded
RFP Response agentNot includedIncludedIncluded
Enclave Mail FilterAll three service mailboxes, triage queue, template draftsNot includedIncludedIncluded
Generative mail triageFor mail the rules mark unsure, in Azure GovernmentNot includedNot includedIncluded
Microsoft 365 Copilot seats0820
Copilot Studio packs012
Azure Government Foundry agentAn extra agent is a change orderNot includedNot included1
Dev and Prod environmentsNot includedNot includedIncluded
Evaluation set and consumption reportNot includedNot includedIncluded
Microsoft + Azure, per month$0incremental$830about$2,500about
inDirectIT stand-up, list$12,000$22,000$55,000
Enclave licensingBusiness PremiumG5G5
03 · Rules for all three

The hard lines do not change by tier.

Whichever tier you pick, the same rules hold.

01

Web grounding is off

At the tenant and at the agent. No commercial AI endpoints and no web grounding on CUI work.

02

GCC High only

Premium’s agent runs in Azure Government, from the gov model catalog only. No commercial Power Platform, commercial pay-as-you-go, or commercial Azure OpenAI against GCC High data. Agents publish only to the web channel, with Microsoft Entra sign-in.

03

The alert carries a pointer, not content

The optional gov-to-commercial alert carries request type, ID, and a link only. Never subject, body, attachments, or CUI narrative. It stays off until the ISSO signs.

04

No Security Copilot. No computer-use agents.

No desktop-control agents in any tier.

05

Makers are named, and few

inDirectIT and your ISSO, or one named admin: at most three. Never the whole company.

06

The RFP agent never invents certifications

It drafts only from approved language.

Microsoft and Azure are billed as pass-through.Your tenant is quoted on its own.

04 · Upgrade credit

Start small. Move up with credit.

Move up a tier within 12 months and you get credit for the stand-up you already paid for.

AI Enable Enclave$12,000 list stand-up
100%

of the Enable stand-up, if you move to Native within 12 months.

AI Native Enclave$22,000 list stand-up
50%

of the Native stand-up, if you move to Premium within 12 months.

AI Premium Enclave$55,000 list stand-up
05 · The Microsoft side

How the Microsoft side is priced.

GCC High prices run above commercial list. Your tenant is quoted on its own through Microsoft’s government reseller program, and Microsoft and Azure are billed as pass-through.

ItemHow it is soldDetail
Microsoft 365 Copilot for GCC HighPer seatPer named user, annual.
Copilot Studio for GCC HighPer packMonthly capacity packs of 25,000 Copilot Credits. Annual, no rollover.
Pay-as-you-goMeteredOverflow on Azure Government, with a written monthly cap.
Maker license$0Makers are inDirectIT and your ISSO, or one named admin: at most three.

In GCC High, native agents run on the web channel, and Microsoft bills that channel in Copilot Studio credits whoever uses it. So the Studio pack and its capped meter carry the agents, and Copilot seats go only to the named roles who work with Copilot in their Microsoft 365 apps (ISSO, IT, BD, AP, office manager), not the whole roster.

Enable · per month$0 incremental

Flows on standard connectors; no seats, no packs.

Native · per monthAbout $830

8 Copilot seats, 1 Studio pack, and capped pay-as-you-go, at GCC High estimated retail.

Premium · per monthAbout $2,500

Premium ships 20 seats and 2 Studio packs, plus a Foundry project in Azure Government.

06 · What done means

What “done” means, tier by tier.

Each tier has a written finish line.

AI Enable Enclave

Enable is done when

  • The flows are running in GCC High.
  • DLP is on.
  • The runbook is delivered.
  • The alert is off, or signed by the ISSO.
  • Each path has been tested once.
AI Native Enclave

Native is done when

  • Enable is done.
  • Three native agents are published on the web channel, with Microsoft Entra sign-in, on your enclave SharePoint site.
  • The libraries are loaded.
  • 8 seats are assigned.
  • The pack and the pay-as-you-go meter have caps.
  • A user job aid is delivered.
  • The first refresh date is on the calendar.
AI Premium Enclave

Premium is done when

  • Native is done.
  • The Foundry agent passes its evaluation set.
  • An Azure budget alert is set.
  • Dev and Prod environments are in place.
  • The first consumption report is delivered.
Talk to the operator

Scope your AI tier.

Tell us which tier you are looking at and who would use it. We will come back with the tier that fits and how your tenant is quoted on the Microsoft side. A practitioner replies, not a sales queue.

Or call 240-331-6256, or email rj@indirectit.com.

Book a boundary review → Choose your enclave plan →

Or email rj@indirectit.com. Share high-level requirements only; do not send CUI or sensitive files.