Choose Save as PDF as the destination.
aicost.ai
VC/PE Diligence Memo
2026-09-20
Pricing as of 2026-07-20
aicost.msp-shadow-ai-governance

Shadow-AI Governance Service (MSP)

Verdict
HIGH EXPOSURE

300 shadow-AI users, 90 sharing sensitive data (3897 prompts/mo); expected annual loss $1,110,000 → governance ROI 1518.75%.

Key figures

Shadow-AI users 300
Sensitive prompts / mo 3,897
Expected annual loss $1,110,000
Your service fee / mo $8,000
Client net / mo $56,750
Governance ROI 1,518.8%
What to do SELL GOVERNANCE NOW
Why 300 employees on unsanctioned AI, 3897/mo prompts carrying sensitive data — exposure math says the governance program at $8000/mo pays for itself in avoided expected loss. This is the easiest security conversation of 2026: the client already suspects it.

Assessment

Exposure and expected-loss math come from the fleet Shadow-AI Exposure brain — identical numbers to the public calculator by design. The MSP layer prices the governance program as a recurring white-label service via cost ÷ (1 − margin). Expected-loss figures are probabilistic estimates*, not predictions, and running the program does NOT make the client legally compliant — sell it as risk reduction plus evidence, which is what it is. Pairs with the Managed AI Service Pricing calculator (its governance floors) and the platform’s shadow-AI discovery (S15 roadmap).

Questions for the founder

  1. What does a discovery scan actually find? Run one before quoting — the real shadow-user count sells the program.
  2. Which regulated data classes are in play? That sets the risk tier in the AI service pricing calculator.
  3. Who owns AI policy at the client today? "Nobody" is your opening slide.

Assumptions & method

Generated by AICost.ai (aicost.msp-shadow-ai-governance), CloudIntelligence.ai LLC. API pricing is sourced vendor-exact from a daily-maintained pricing single source of truth as of 2026-07-20. Values marked with an asterisk are analyst estimates rather than vendor-verified data. This memo is a cost-and-unit-economics analysis prepared for diligence purposes; it is not investment advice, and it does not assess team, market, product or legal risk.