Businesses that bought into Microsoft 365 Copilot’s promise of AI‑powered productivity are discovering a hard truth: the tool does not sell itself. A new fixed‑fee rescue service, announced on June 29 from Houston by consultancy EPC Group, aims to salvage deployments that have flatlined well below usage targets. Dubbed the Microsoft 365 Copilot Rescue Engagement, the six‑week, fixed‑price intervention targets the growing number of organizations that licensed Copilot for hundreds or thousands of employees only to watch adoption languish in single‑digit percentages.
EPC Group, a Microsoft Gold Partner and eight‑time top content contributor at Microsoft Ignite, is pricing the engagement at $50,000—a flat fee that covers assessment, governance overhaul, user enablement, and ROI measurement. “We kept seeing the same pattern: CIOs bought Copilot licenses because the demo looked amazing, but three months later nobody is using it in their actual workflow,” said Errin O’Connor, founder and CEO of EPC Group, in the announcement. “They don’t have a governance plan, nobody trained the users, and the security team is terrified of data leakage. This engagement is designed to fix all three in six weeks flat.”
The Quiet Crisis of Copilot Under‑Adoption
Microsoft has been aggressively pushing 365 Copilot since its general availability in November 2023. By early 2025, the company reported that over 30,000 organizations were using the assistant. Yet several surveys paint a different picture. A June 2025 Forrester study found that only 12% of licensed Copilot users returned to the tool after their first week. Gartner’s April 2025 Digital Worker Survey revealed that 60% of organizations with more than 500 Copilot licenses described adoption as “significantly below expectations.” The most common pain points: lack of clear use cases (cited by 48%), governance and compliance fears (43%), and insufficient end‑user training (39%).
Those numbers translate into wasted spend. With Copilot for Microsoft 365 priced at $30 per user per month, a 1,000‑seat rollout costs $360,000 annually. If only 15% of licensed users actively employ the assistant, the effective cost per engaged user balloons to $200 per month—a figure that CFOs are increasingly unwilling to tolerate. “We’re entering the trough of disillusionment,” said Avivah Litan, distinguished VP analyst at Gartner, in a May 2025 research note. “The early adopters got value because they invested in change management. The fast followers who just flipped the switch are now paying the price.”
Inside the Six‑Week Engagement
EPC Group’s rescue model borrows from its established SharePoint, Power Platform, and Azure governance practices. The engagement unfolds in three two‑week sprints, each with a discrete deliverable and client sign‑off.
Sprint 1: Technical Health and Tenant Readiness
Week one begins with a forensic scan of the Microsoft 365 tenant. Engineers use EPC’s proprietary “Copilot Readiness Analyzer”—a PowerShell‑based framework that checks over 140 configuration items—to uncover misconfigurations that silently sabotage Copilot functionality. Common discoveries include:
- Missing ‘Optional connected experiences’ toggle – Copilot requires this Office privacy setting to be enabled, yet many security‑hardened tenants have it disabled via Group Policy.
- Incomplete semantic indexing – Copilot relies on the Microsoft Graph and semantic index for SharePoint to surface relevant content. If search crawl is broken or sites are excluded from the index, Copilot returns empty or irrelevant results.
- Insufficient user‑profile data – Copilot’s grounding in organizational data requires rich profiles in Azure Active Directory. Sparse or inconsistent profile fields weaken Copilot’s ability to reference colleague expertise.
- Conditional access policies that block Copilot – Some policies inadvertently deny access to the Copilot service principal or the Office.com domain.
A tenant readiness scorecard is delivered at the end of week one, complete with a prioritized remediation plan. EPC Group promises that 80% of the technical fixes can be implemented within the engagement’s six‑week window, with the remaining items tagged for the client’s IT team.
Sprint 2: Governance, Security, and Oversharing
This phase tackles the number‑one reason CIOs hesitate to push Copilot broadly: the specter of oversharing. Copilot can surface sensitive documents, HR records, or confidential financial data if permissions are overly permissive. EPC Group’s approach includes:
- SharePoint site access audit – Using Microsoft Purview and custom queries, the team identifies sites with “Everyone except external users” access and those with broken permission inheritance.
- Microsoft Purview sensitivity‑label hygiene – Many organizations have sensitivity labels deployed but only applied to a fraction of content. The engagement includes a bulk‑labeling campaign and automatic label policies.
- Data Loss Prevention (DLP) policy tuning – EPC creates DLP rules that prevent Copilot from summarizing or referencing content that contains specific sensitive info types, such as credit card numbers or social security numbers.
- Copilot‑specific governance controls – The team configures Microsoft 365 Copilot admin settings, such as restricting which data sources Copilot can use across the tenant and disabling web grounding if internal‑only data is required.
A governance runbook is the deliverable, outlining step‑by‑step procedures for maintaining security posture as Copilot evolves. “Most enterprises don’t realize that Copilot’s governance is not a one‑time setup,” O’Connor noted. “Every time a new Teams site or SharePoint library is created, you need a process to evaluate what Copilot will see there. Our runbook automates 70% of that.”
Sprint 3: User Enablement and ROI Measurement
The final sprint shifts from configuration to culture. EPC Group deploys a three‑pronged enablement program:
1. Persona‑based workshops – Two‑hour sessions tailored to sales, marketing, HR, finance, and engineering. Each workshop demonstrates Copilot in Outlook, Teams, Word, Excel, and PowerPoint with role‑specific prompts and templates.
2. “Lunch & Learn” drop‑in clinics – Bi‑weekly open sessions where employees can bring real‑world tasks and get hands‑on guidance.
3. Copilot champion network – Identification, training, and tooling for 10–20 internal champions who will sustain adoption after the engagement ends.
Equally critical is the ROI framework. EPC Group installs a Power BI dashboard that pulls data from Microsoft 365 usage analytics, the Copilot admin portal, and Viva Insights. The dashboard tracks:
- Feature adoption rate – Percentage of licensed users who use Copilot at least five times per week.
- Time‑saved estimates – Based on self‑reported survey data collected via Microsoft Forms, correlated with Copilot usage telemetry.
- Task‑completion ratio – Percentage of interactions where Copilot provided a satisfactory response, measured by sentiment analysis on user feedback.
- Content‑quality metrics – Before‑and‑after review of documents, emails, and presentations for quality indicators like grammar scores and readability indices.
O’Connor claims that clients who follow the rescue protocol see a median 4.7x increase in weekly active Copilot users within 90 days. “The fix isn’t magic; it’s just disciplined change management and accurate technical baselining,” he said.
Why a Fixed Fee Matters
EPC Group’s $50,000 fixed fee stands in stark contrast to typical consulting engagements that bill hourly and can easily run past $150,000. By capping the price, EPC aligns its incentives with the client’s goal of rapid improvement. “We wanted to remove the friction of budget negotiation,” O’Connor said. “At $50k, it’s a single line item that any VP can approve. And if we don’t deliver the promised assessment, governance plan, and enablement, the client isn’t on the hook for a pile of change orders.”
Analysts note that the offering could pressure other Microsoft partners to adopt similar transparent pricing. “Fixed‑fee consulting for AI adoption is a smart move,” said Jeffrey Hammond, principal analyst at Forrester. “Buyers are exhausted by hourly engagements that drag on without clear outcomes. If EPC can standardize the Copilot rescue process, they’ll capture a big share of an underserved market.”
The Bigger Picture: AI Governance Becomes a Boardroom Conversation
EPC’s rescue engagement lands as AI governance vaults from an IT concern to a board‑level priority. Microsoft itself has released a flurry of new Copilot controls this year: the Copilot admin center, tenant‑wide data access policy, and expanded sensitivity label integration. Even so, internal audit committees are demanding evidence that Copilot is being used safely and effectively.
“Governance is the quiet killer of Copilot ROI,” said O’Connor. “If the security team says, ‘Sorry, we haven’t reviewed the data exposure risk,’ the whole rollout stalls. Our engagement gives them that review, fully documented, in two weeks.”
The timing is crucial. Microsoft has indicated that Copilot usage metrics and tenant health scores will soon influence organizations’ ability to negotiate volume licensing renewals. A low adoption score could signal to Microsoft that the client is unlikely to expand Copilot seats, weakening the client’s bargaining position.
What Critics Say
Skeptics question whether a six‑week engagement can truly shift culture in a large enterprise. “Culture change takes months, not weeks,” said Dr. Mary Lacity, director of the Blockchain Center of Excellence at the University of Arkansas and an expert on organizational adoption of technology. “EPC’s model seems to focus heavily on the technical and process side, which is necessary but not sufficient. The risk is that after the engagement, old habits creep back and usage drops again.”
EPC counters that its champion network and ongoing governance runbook are specifically designed to prevent backsliding. The firm also offers a quarterly “health check” retainer for $2,500 per month, though O’Connor emphasizes that it is optional. “We don’t want the rescue to become a dependency. The goal is to equip the enterprise to run on its own.”
Is This for You?
EPC Group says the rescue engagement is a fit for organizations that meet three criteria:
1. At least 300 paid Microsoft 365 Copilot licenses deployed for three months or more.
2. Fewer than 25% of licensed users are active on a weekly basis.
3. The organization is willing to expose its tenant to an external assessment, including security and compliance configurations.
For smaller deployments or those still in pilot phase, the company recommends its four‑hour “Copilot Strategy Briefing” at $7,500.
Looking Ahead
The Copilot Rescue Engagement underscores a maturing market reality: AI tools require the same rigor as any enterprise software deployment. The days of simply turning on a feature and waiting for magic are over. As Microsoft pushes Copilot deeper into Teams, loop, and the Office apps, the gap between prepared and unprepared tenants will only widen.
EPC Group plans to evolve the service as Microsoft releases new Copilot capabilities. A “Copilot for Security” rescue engagement is expected in Q4 2026, and a version tailored to government tenants with GCC licensing is in development. For now, the message to CIOs is blunt: if your Copilot investment is collecting dust, help is available—and it’s cheaper than letting the licenses lapse.