AI Readiness Starts With Your Data: What NZ Businesses Need to Sort Out First

What Makes AI Readiness Important?

AI tools are only as good as what you point them at. Rush past the groundwork, data quality, access permissions, governance, and you're not getting productivity gains, you're getting risk and wasted spend dressed up as innovation.


Figure8 runs a fixed 90-day AI readiness engagement built on exactly this order of operations: assess where you stand, secure and optimise the data, put governance in place, then pilot and measure. The businesses that get AI readiness for business right don't have better AI, they just did the boring bit properly first, in that sequence, rather than switching on a tool and hoping for the best.

Key Areas to Sort First

Data Quality and Structure

If your files live in four different places under six different naming conventions, with three versions of "final," AI won't fix that, it'll just find it faster and repeat it back to you with confidence. One duplicated client spreadsheet fed into a Copilot summary is all it takes to send someone the wrong pricing.

Quick self-check:

Quick self-check:

Do you have one clearly designated "source of truth" location for key business data, or several?

Has anyone audited for duplicate or outdated files in the last 12 months?

Would a new starter know which version of a file is current, without asking?

This is the first phase of Figure8's AI readiness process, the assess-and-optimise stage, and it often surfaces alongside broader infrastructure work that's worth reviewing at the same time.

Access and Permissions

Most businesses have permission settings that grew organically over the years, someone left, someone got added to a shared drive "just for now," and nobody's audited it since. That's manageable when humans are searching manually. It's a different story once AI can surface anything it has access to, instantly, in a neat summary.

Can you name who currently has access to your most sensitive folder, without checking?

Has anyone left the business in the last year whose access wasn't formally revoked?

Are shared drives set to "anyone in the organisation" by default, rather than by role?

This is the first phase of Figure8's AI readiness process, the assess-and-optimise stage, and it often surfaces alongside broaderinfrastructure work that's worth reviewing at the same time.

Access and Permissions

Most businesses have permission settings that grew organically over the years, someone left, someone got added to a shared drive "just for now," and nobody's audited it since. That's manageable when humans are searching manually. It's a different story once AI can surface anything it has access to, instantly, in a neat summary.

Quick self-check:

Are shared drives set to "anyone in the organisation" by default, rather than by role?

Are shared drives set to "anyone in the organisation" by default, rather than by role?

Are shared drives set to "anyone in the organisation" by default, rather than by role?

This is the first phase of Figure8's AI readiness process, the assess-and-optimise stage, and it often surfaces alongside broaderinfrastructure work that's worth reviewing at the same time.

Microsoft Copilot, properly configured, keeps data within your Microsoft 365 tenant and doesn't use it to train external models, which aligns with these obligations. Figure8 delivers its managed services through a risk and privacy lens for exactly this reason. As the Privacy Commissioner puts it plainly, "if in doubt, we recommend you do not use AI tools to handle personal information" (Office of the Privacy Commissioner, One-page summary of AI and the IPPs). That's as sound a starting principle as any.

Everyone's talking about Copilot and AI productivity gains. Before you switch anything on, here's the groundwork most NZ businesses are skipping, and why it matters.


Here's the pattern we keep seeing. A business gets excited about Copilot, rolls it out to the team, and within a week someone's asking why the AI just surfaced a spreadsheet that should have stayed locked down, or why the summary it wrote pulled together three different versions of the same client file. That's not a Copilot problem. That's an AI readiness for business problem, and it was sitting there long before anyone switched anything on.


Figure8 has spent years advising New Zealand businesses through IT and technology change, no vendor agenda, just straight advice on what actually needs sorting before the exciting part starts.

Frequently asked questions

What does "AI ready" actually mean?

Your data is clean, organised, and properly permissioned, and you've got clear rules for how AI tools can use it. It's not about having the fanciest tech stack, it's about not exposing yourself when you switch AI on.

Do I need clean data before using Copilot?

Ideally, yes. Copilot works from what it can see, and only shows users what they already have permission to access. Messy or poorly permissioned data means messy or risky outputs.

What's the biggest mistake businesses make when adopting AI?

Switching a tool on before sorting data, access, and governance, in that order. Figure8 sees this constantly: businesses that skip the assessment phase are usually the ones fielding awkward questions a few months later.

How long does it take to get data AI ready?

Figure8's own engagement runs a fixed 90 days from assessment through to pilot and measurement. Most businesses can complete a proper data audit and permissions clean-up within a few weeks of that, depending on how tidy things already are.

Where to Start

Everyone's talking about Copilot and AI productivity gains. Before you switch anything on, here's the groundwork most NZ businesses are skipping, and why it matters.


Here's the pattern we keep seeing. A business gets excited about Copilot, rolls it out to the team, and within a week someone's asking why the AI just surfaced a spreadsheet that should have stayed locked down, or why the summary it wrote pulled together three different versions of the same client file. That's not a Copilot problem. That's an AI readiness for business problem, and it was sitting there long before anyone switched anything on.


Figure8 has spent years advising New Zealand businesses through IT and technology change, no vendor agenda, just straight advice on what actually needs sorting before the exciting part starts.

If you want a second opinion on where your organisation actually stands, talk to the Figure8 team for a straight-talking conversation, no jargon, no pressure.