Skip to content
CUI Trackby inDirectIT

CUI Track AI

AI inside the boundary.
On three tiers.

Every CUI Track enclave is built AI-ready: labels, DLP, and logging are on from the first day. Three add-on tiers turn AI on, from approval flows to a production agent in Azure Government. All three stay inside GCC High.

Scope your AI tierCompare the tiers
Tiers
Enable · Native · Premium
Runs in
GCC High, Azure Government
Web grounding
Off
Makers
inDirectIT and your ISSO
Microsoft and Azure
Billed as pass-through

The tiers

Start with flows. Add agents when you are ready.

TIER 1 OF 3

AI Enable Enclave

Flows only. No Studio agents, no Copilot seats, no models on CUI.

inDirectIT stand-up
$12,000List
Microsoft + Azure a month
$0Planning figure

Enclave licensing Stays on Microsoft 365 Business Premium with the Defender and Purview Suite

Ships

  • Approvals, Travel, and Invoice approval flows
  • Optional gov-to-commercial metadata alert
  • Rules-only mail sort on one watched inbox
  • SharePoint lists, Teams Approvals, and standard Power Automate connectors in GCC High
  • DLP policy, three service mailboxes, runbook, and SSP language

Does not ship

Service Desk · RFP agent · Generative mail · Foundry · Security Copilot

Fit A first enclave, where the ISSO wants motion without a chat surface.

TIER 2 OF 3

AI Native Enclave

Enable, plus native agents your people can ask.

inDirectIT stand-up
$22,000List
Microsoft + Azure a month
About $830Planning figure

Enclave licensing Moves to Microsoft 365 G5 (GCC High)

Adds

  • Enclave Service Desk agent, on your enclave SharePoint site
  • RFP Response agent, drafting from the approved-language library only
  • Enclave Mail Filter across all three service mailboxes: rules only, an owned triage queue for what the rules can’t place, and template reply drafts a person sends
  • Agents on the web channel with Microsoft Entra sign-in, embedded on your enclave SharePoint site (Copilot Studio in GCC High has no Teams channel)
  • 8 Microsoft 365 Copilot seats for named roles
  • 1 Copilot Studio capacity pack (25,000 credits a month)
  • Azure Government pay-as-you-go as capped overflow, with per-agent credit caps
Year-one library refresh
$4,500
Year-one customer cash, list
About $36,500

Fit BD and AP work lives in the enclave, and you will seat the control-plane roles.

TIER 3 OF 3

AI Premium Enclave

Native, plus one Azure Government Foundry agent and an operations layer.

inDirectIT stand-up
$55,000List
Microsoft + Azure a month
About $2,500Planning figure

Enclave licensing Moves to Microsoft 365 G5 (GCC High)

Adds

  • A Foundry project in Azure Government
  • Generative mail triage: mail the Mail Filter rules mark unsure is classified in Azure Government
  • One production agent: evidence, read-only CUI locator, or BD assembler with a human gate
  • Dev and Prod Copilot Studio environments
  • 20 Copilot seats and 2 Studio packs
  • An evaluation set the agent must pass, and a monthly consumption report
  • Optional inDirectIT AI operations retainer
Extra Foundry agent
Change order, not unlimited

Fit Multi-entity companies, factories, or enclaves already on Native.

AI tiers are add-ons to a CUI Track enclave. Microsoft and Azure figures are planning totals at GCC High estimated retail; your tenant is quoted on its own.

The catalog

What each tier turns on.

CapabilityEnableNativePremium
Approvals, Travel, and Invoice flows●●●
Gov-to-commercial metadata alertOPTIONALOPTIONALOPTIONAL
Enclave licensingBP + suiteG5G5
Rules-only mail sort, one watched inbox●●●
Enclave Service Desk agent–●●
RFP Response agent–●●
Mail Filter: all three mailboxes, triage queue, template drafts–●●
Generative mail triage––●
Microsoft 365 Copilot seats0820
Copilot Studio packs012
Azure Government Foundry agent––1
Dev and Prod environments––●
Evaluation set and consumption report––●

Rules for all three

The lines no tier crosses.

Each rule is set in the tenant and documented with the enclave, so the AI you add is evidence for the assessment instead of a finding in it.

UPGRADE CREDIT

Move from Enable to Native within 12 months and 100% of the Enable stand-up is credited. Move from Native to Premium within 12 months and 50% of the Native stand-up is credited.

The Microsoft side

Why seats go to named roles.

In GCC High, native agents run on the web channel, and Microsoft bills that channel in Copilot Studio credits whoever uses it. So the Studio pack and its capped pay-as-you-go meter carry the agents, and Copilot seats go only to the named roles who work with Copilot in their Microsoft 365 apps (ISSO, IT, BD, AP, the office manager), not the whole roster.

Microsoft 365 Copilot for GCC High
Per named user, annual
Copilot Studio for GCC High
Monthly capacity packs of 25,000 credits, no rollover
Overflow
Azure Government pay-as-you-go, with a written cap
Maker license
No cost

GCC High prices run above commercial list. Tier figures are planning totals at GCC High estimated retail, billed as pass-through and quoted per tenant through Microsoft’s government reseller program.

What done means

A tier is finished when you can test it.

ENABLE

The flows run in GCC High, DLP is on, the runbook is delivered, the alert is off or signed, and each path has been tested once.

NATIVE

Enable is done, three native agents are published on the web channel, with Microsoft Entra sign-in, on your enclave SharePoint site, the libraries are loaded, 8 seats are assigned, the pack and pay-as-you-go meter are capped, users have a job aid, and the first refresh is on the calendar.

PREMIUM

Native is done, the Foundry agent passes its evaluation set, an Azure budget alert is set, Dev and Prod are separate, and the first consumption report is out.

Boundary review

Pick the tier with us.

A boundary review covers who lives in the enclave, how mail is split, and whether an ISSO will sign the alert. That decides the tier.

Book a boundary reviewCall 240-331-6256