InquilionGRC offers standing assurance for organisations that want ongoing independent oversight. Transaction assurance serves PE houses that need configuration evidence on a deal timeline. Both are built on the same methodology, the same sixteen governance domains and the same commitment to independence from delivery. No prices are shown here because every engagement is scoped to the organisation. A briefing is the right starting point.
The entry assessment. Scope is agreed, read-only access is granted, the assessment runs and three reports are delivered to the board.
The standing annual engagement. The same evidence is produced on a cycle and accumulates into a governance record.
Standing assurance is how most organisations engage. It provides ongoing, independent oversight of Microsoft 365 configuration, aligned to the board's reporting cadence. The value is in the continuity: not a single snapshot, but a governance record that builds over time.
Every engagement begins with a Board Review, the named entry assessment. It is the foundation of the assurance: a complete governance position across sixteen governance domains, establishing the starting point against which all future assessments are measured. Without it there is nothing to trend against, nothing to compare and no evidence of progress.
From the baseline, standing assurance continues at a cadence matched to the board's reporting cycle, typically monthly or quarterly. Each cycle produces a fresh governance position showing whether posture is improving, stable or deteriorating, and a cumulative findings tracker shows remediation progress across all periods. Over time, the board builds a governance record that demonstrates active, evidenced oversight. Every cycle produces the same three deliverables, delivered to the board: the Board Governance Report, Risk Report and Compliance Report.
Transaction assurance is a standalone assessment for PE houses. It provides independent evidence of Microsoft 365 configuration risk in a target or portfolio organisation, structured for investment committee review and aligned to the deal timeline. Findings are framed for due diligence, deal terms, warranties and post-completion remediation planning, with every portfolio company assessed against the same governance benchmarks.
Engagement is per assessment. One target, one assessment, one engagement, one cost. There is no subscription, no retainer and no ongoing commitment. If the portfolio company subsequently wants standing oversight, the assessment carries forward as the baseline for standing assurance. That is a separate decision, made by the portfolio company board, at a later date. How InquilionGRC works with PE houses covers the full lifecycle.
Engagement scope and deliverables reflect the methodology current at the time of engagement.
Domain coverage, assessment checks and regulatory framework mapping may be updated between the descriptions shown here and the point of engagement.
The engagement letter defines the specific scope for each client.
Whether you are a board looking for ongoing governance oversight or a PE house that needs configuration evidence on a deal timeline, the first step is the same. Tell us about your organisation and we will explain how the engagement works.
REQUEST INFO