Your team is already using AI. Do you know what they are using and on what data?
Every 20 to 200 staff NZ business is running shadow AI right now. Someone is pasting client information into ChatGPT. Someone is using a meeting summary tool the company never approved. Someone is generating draft client replies with a tool running in their browser. None of this is malicious. Staff are just trying to work faster. The risk sits with you.
The answer is not to ban AI. That does not work, and you would be throwing away a real productivity opportunity. The answer is to give your people a safe, approved way to use AI, with proper governance sitting underneath. That is what this service does.
What do OxygenIT AI services actually do?
Our AI services help NZ businesses move from ad-hoc, uncontrolled AI use to governed, deliberate AI adoption. We work with your leadership team to set an AI strategy, identify the highest-value use cases, roll out sanctioned tools (most commonly Microsoft 365 Copilot), retire the shadow AI and apply an ISO 42001-aligned governance framework on top.
A typical OxygenIT AI engagement delivers:
- An AI readiness and shadow AI discovery assessment.
- An AI strategy document, mapped to business priorities and risk appetite.
- Rollout of Microsoft 365 Copilot and other sanctioned AI tools, with data boundary controls and pilot group design.
- Staff training and prompt guidance, role by role.
- An ISO 42001-aligned AI governance framework with tool inventory, approval process, ongoing oversight and incident response.
You end up with staff who use AI confidently and safely, leadership who understand what is happening and why, and evidence of governance you can show to customers, auditors and insurers.
When does a Christchurch or New Zealand SMB need formal AI services?
Most owners and operations managers know the moment they need this. Here are the five clearest triggers:
- You know staff are using AI tools that the business has never approved, and you have no visibility over what data they are feeding those tools.
- You are about to roll out Microsoft 365 Copilot or have already rolled it out without a governance framework.
- A customer, insurer or auditor is asking about your AI governance policies and you do not yet have good answers.
- Leadership wants real AI-driven productivity but does not have a clear view of which use cases will pay off first or safely.
- You are pursuing ISO 42001 SMB1001:2026 or ISO 27001 certification, and need AI controls documented and evidenced.
If two or more of these sound familiar, you need formal AI services.
What is included in OxygenIT’s AI services?
Our AI services are delivered across six workstreams, scoped to your current AI maturity and business priorities. Every engagement ends with a working AI governance framework and evidence you can show to customers, auditors and insurers.
AI readiness and shadow AI discovery
A structured review of how AI is being used in your business today: what tools are in use, on what data, by whom and with what controls. Most engagements surface meaningful shadow AI that leadership was not aware of.
AI strategy and use case design
A written AI strategy: where AI fits in your business, what use cases are in scope for the next 6 to 12 months, which tools will be used and what is explicitly out of scope. Signed off by your leadership team.
Microsoft 365 Copilot rollout
Tenant readiness, data boundary controls, sensitivity labelling, pilot group design, prompt guidance for staff and measurable pilot outcomes. Most NZ SMB Copilot deployments start here.
Staff training and prompt guidance
Role-specific training and prompt guidance. Finance people get finance-relevant examples, client service people get service-relevant examples. Short, practical, reusable. No multi-day classroom sessions.
ISO 42001-aligned AI governance
An AI governance framework covering tool inventory, approval process for new AI tools, data classification, human-in-the-loop rules and incident response. Aligned to ISO 42001, which OxygenIT is independently certified to.
Ongoing AI oversight
A quarterly AI review as AI tools, regulations and use cases evolve fast. Your governance framework cannot be set once and forgotten. Ongoing oversight keeps you current.
How an AI engagement works: your first 30, 60 and 90 days
First 30 days: discovery and strategy
AI readiness and shadow AI discovery. Leadership workshop on AI strategy, risk appetite and use case priorities. Draft AI strategy and use case shortlist. Sign-off from your leadership team.
Days 30 to 60: governance and first rollout
ISO 42001-aligned governance framework drafted and signed off. Microsoft 365 Copilot tenant readiness and pilot group rollout (where in scope). First staff training sessions delivered. First pilot use case measured.
Days 60 to 90: scale and embed
Rollout expanded beyond the pilot group. Second and third use cases in flight. Governance framework in live use. Quarterly AI review cadence established. From day 91 onwards, you have a governed AI programme, not a shadow one.
Why Christchurch businesses choose OxygenIT for AI services
Independently certified to ISO 42001
OxygenIT is one of the few NZ managed IT providers independently certified to ISO 42001, the international standard for AI management systems. Our AI governance work is anchored in a standard, not improvised.
Certified where it matters
Alongside ISO 42001, independently certified to ISO 27001 for information security. SMB1001:2026 assessor capability. We apply the same standards internally that we advise on externally.
Microsoft 365 Copilot depth
As a Microsoft Partner working in M365 tenants every day, we know what Copilot can and cannot do, what its real-world pilot looks like and how to govern it. No guesswork.
Plain-English leadership briefings
Our AI strategy sessions are led by consultants who can translate between the technical reality of AI and the business reality of leadership teams. No AI hype, no jargon wall.
Business-first, not tool-first
We do not start with a tool we want to sell you. We start with your business priorities and your risk appetite. Tools follow. That is why our AI engagements actually deliver value instead of becoming shelfware.
How much do AI services cost in New Zealand?
AI services at OxygenIT are delivered as a combination of fixed-fee setup projects and ongoing monthly retainers, scaled to the size and complexity of your business. We do not publish hourly rates because every engagement is scoped to outcomes. Ask for indicative pricing for your business.
AI Essential
For 20 to 50 staff firms starting their AI journey. Shadow AI discovery, AI strategy workshop, Copilot readiness assessment, lightweight governance framework. Fixed-fee setup plus optional monthly retainer for quarterly reviews.
AI Standard
For 50 to 100 staff firms rolling out Copilot or multiple AI use cases. Full six-workstream engagement including pilot rollout, staff training and ISO 42001-aligned governance. Fixed-fee setup plus monthly retainer.
AI Comprehensive
For 100 to 200 staff firms, regulated industries or multi-entity groups. Full AI programme with embedded consultant, multiple simultaneous use cases, ISO 42001 certification pathway (where desired) and quarterly executive reporting. Priced from a monthly retainer.
ISO 42001 and why it matters for NZ businesses
ISO 42001 is the international standard for AI management systems. It is the AI equivalent of ISO 27001. It covers how organisations govern AI: inventory, risk assessment, controls, training, incident response and continual improvement. OxygenIT is one of the few NZ managed IT providers independently certified to it.
For an NZ business using AI, ISO 42001 matters for three reasons. It is the framework NZ regulators and large customers will increasingly reference. It maps cleanly to Privacy Act 2020 obligations where AI processes personal information. It gives insurers and auditors a recognised reference point. Working with an ISO 42001 certified provider means your AI governance is anchored in a standard, not improvised.
Frequently asked questions about AI services
01. What AI services do you provide?
OxygenIT AI services cover AI strategy, shadow AI discovery, Microsoft 365 Copilot rollout, AI use case design, staff training and prompt guidance, and ISO 42001-aligned AI governance. We focus on practical adoption for 20 to 200 staff NZ businesses, not deep custom model development. The goal is to get real value out of AI safely, with evidence of governance you can show to customers and regulators.
02. What is ISO 42001?
ISO 42001 is the international standard for AI management systems, published in late 2023. It is the AI equivalent of ISO 27001. It covers governance, risk assessment, controls, training and continual improvement of AI use within an organisation. OxygenIT is one of the few NZ managed IT providers independently certified to ISO 42001. That certification means our AI governance work is anchored in an audited standard.
03. Is Microsoft 365 Copilot safe to roll out?
Yes, with the right governance. Copilot uses Microsoft’s commercial data protection boundary, which means your prompts and responses are not used to train foundation models. But tenant configuration, data sensitivity labelling, user access and staff training still matter. Our Copilot rollouts include the data boundary review, pilot group design, sensitivity labelling and ISO 42001-aligned governance by default.
04. What is shadow AI and why does it matter?
Shadow AI is the use of AI tools inside your business that have not been sanctioned or governed by leadership. Typical examples are staff using personal ChatGPT accounts with work data, free browser-based summary tools, unofficial meeting transcribers or AI email assistants. Shadow AI matters because it exposes you to data leaks, compliance breaches and reputational risk. Most NZ SMBs have more shadow AI than they realise.
05. How much do AI services cost in NZ?
AI services at OxygenIT are delivered as a combination of fixed-fee setup projects and ongoing monthly retainers. We offer three engagement sizes (Essential, Standard, Comprehensive) sized for 20 to 200 staff firms. We do not publish hourly rates because every engagement is scoped to outcomes. Ask for indicative pricing for your business size and AI maturity.
06. Do I need to be on Microsoft 365 to work with OxygenIT on AI?
Not strictly. Microsoft 365 is the most common platform for our AI work because Copilot is the most broadly applicable AI tool for NZ SMBs. For Google Workspace environments we work with Gemini and third-party tools. The strategy, governance and training work is platform-independent.
07. Will you help us train staff on AI?
Yes. Staff training and role-specific prompt guidance is a core workstream in every engagement. Training is short, practical and role-relevant. Finance people get finance-relevant examples. Client-facing staff get service-relevant examples. No multi-day classroom sessions. Reusable guides so new hires can pick it up.
08. What about AI privacy and Privacy Act 2020?
Our AI governance framework includes a privacy impact assessment for each AI use case where personal information is involved. We map controls to Privacy Act 2020 obligations, including transparency, purpose limitation, data retention and data breach readiness. If you are processing personal information with AI, we make sure your controls are actually defensible.
09. Do you build custom AI models?
Only very selectively. Most NZ SMBs get the biggest return from well-governed use of general-purpose AI tools like Microsoft 365 Copilot, plus targeted integrations into existing workflows. Custom model development is appropriate for a small number of specific use cases, and we engage specialist partners where it is the right answer. We do not sell model development that does not pay back.
10. Do you only serve Christchurch, or all of New Zealand?
OxygenIT is based in Christchurch but delivers AI services across New Zealand. Leadership workshops and pilot work is delivered in person where practical and remotely where efficient. Our Canterbury presence matters because it puts a local team behind you, not because it limits who we work with.
