Getting AI Right from Day One
How Fund Evaluation Group, LLC (FEG), an independent investment management firm serving institutions, adopted Claude Enterprise safely from the start.
FEG saw what AI could do for its business. And as a fiduciary investment advisory firm, it understood something many organizations learn the hard way: in a regulated environment, you don’t adopt AI first and add controls later. Getting it right from the start is the responsible way in.
In about 2.5 weeks, FEG established a governed, validated Claude Enterprise platform with Aditi’s support, giving its teams a foundation to put AI to work with the confidentiality, compliance, and control their business demands.
Executive Highlights
- 2.5 weeks: Handoff readiness
- 16 of 16: Validation checks
- 2: Enterprise connectors
THE CHALLENGE
Turning Claude Enterprise Access Into a Governed AI Platform
For a fiduciary firm, safe adoption isn’t a constraint on AI. It’s the way in.
FEG wasn’t cautious about AI. It was deliberate about how to adopt it. In a fiduciary investment environment, where confidentiality, accuracy, approved-source use, and human review aren’t optional, putting AI in front of the firm means getting the governance right before you scale, not after.
So FEG defined what “safe from day one” had to mean:
Access Control: Define who should use Claude Enterprise and which capabilities each group should have.
Department Boundaries: Separate business context across teams so users work with the right instructions and knowledge.
Connector Risk: Enable Microsoft 365 and GitHub access without bypassing existing source-system permissions.
AI Behavior: Define organization-wide and department-specific rules for how Claude should respond.
Security & Compliance: Preserve confidentiality and enforce a least-privilege access model.
Operational Ownership: Prepare FEG IT to maintain the platform after handoff.
THE SOLUTION
How FEG Built Its Access Model
FEG turned that standard into a structured Claude Enterprise configuration, with Aditi’s support, bringing its security, access, and adoption requirements into the platform.
With Aditi’s support, FEG put the following in place:
Access Foundation: Configured members, seats, groups, custom roles, and role-based permissions. Least-privilege access ensures users receive only the capabilities required for their role; groups determine which custom role applies to each member; advanced capabilities are limited to Enterprise IT and Platform Owner roles.
Department Enablement: Created department-level Projects with dedicated instructions and controlled access. Each business area has a dedicated Project for its workflows and context; sharing rules define access; knowledge files can provide approved department-specific context.
Behavior Governance: Implemented organization-level and project-level instructions to guide Claude responses. FEG policies and organization-level instructions take priority over project instructions, with review and escalation boundaries defined through instructions.
Connector Control: Configured Microsoft 365 and GitHub access with defined permission boundaries.
Security Alignment: Applied privacy, security, least-privilege, and usage controls across the environment.
Operational Readiness: Delivered validation evidence and a Platform Owner guide for FEG IT.
BEFORE AND AFTER
Before
New Claude Enterprise environment.
Undefined access structure.
Enterprise connector access.
After
Governed platform FEG IT can run and build on.
Role-based access, Projects, and instructions aligned to FEG’s governance model.
Controlled Microsoft 365 and GitHub access with defined permission boundaries.
IMPLEMENTATION SCOPE
20 Claude Enterprise seats: At implementation, with an expected future increase to approximately 30.
7 custom roles and 17 groups: Supporting the least-privilege access model.
17 Department Projects: And 18 documented organization- and project-level instructions.
2 enterprise connectors: Configured: Microsoft 365 and GitHub.
THE CONTROLS THAT MAKE SAFE ADOPTION REAL
Microsoft 365: Approved user groups; read-only configuration; Claude inherits existing user permissions; users connect with their own approved corporate accounts.
Microsoft 365 Guardrails: Audit logging enabled; personal Claude accounts are not intended for FEG business use; connector changes require security/governance review.
GitHub: Restricted to Enterprise IT; per-user authorization; repository permissions remain governed by GitHub.
TECHNOLOGY
What Was Used and Configured
Claude Enterprise | Microsoft 365 | GitHub
THE RESULTS
What FEG Can Do Now
A Safe Foundation for Broader AI Adoption, From Day One.
Least-Privilege Access, by Design. 7 custom roles and 17 groups provide a structured access model.
Department-Specific Governance, Structured by Context. 17 Department Projects and 18 documented instructions establish defined boundaries for how each business area uses Claude.
Controlled Enterprise Connectivity. 2 connectors, Microsoft 365 and GitHub, were configured with defined permission boundaries.
A Foundation FEG IT Can Own. The implementation reached handoff readiness in approximately 2.5 weeks, with a Platform Owner guide delivered.
DELIVERY PROOF
Evidence That the Adoption Is Safe
Role Permissions: Confirmed roles granted expected capabilities.
Group Assignments: Validated groups were created and mapped to the correct roles.
Project Configuration: Confirmed project instructions and group assignments were in place.
Budget Controls: Validated spend-limit behavior and restriction enforcement.
Microsoft 365 Read-Only: Confirmed users could retrieve permitted content; write actions were blocked as expected.
GitHub: Confirmed Enterprise IT access and permission inheritance.
Restriction Validation: Restricted actions failed as intended.
Validation: 16 validation checks executed; all 16 passed.
Negative Tests: 4 negative tests confirmed restricted behavior was blocked as intended.
Transparency: Chat export requires Primary Owner access; the implementation team had Owner-level access, so that item could not be tested.
OUTCOME HIGHLIGHT: PROVEN, NOT PROMISED
A Safe Foundation for Broader AI Adoption, From Day One.
FEG established a governed, validated Claude Enterprise platform with Aditi’s support, bringing together least-privilege access, controlled connectors, Department Projects and instructions, and validated controls so FEG’s people can put AI to work with the confidentiality, compliance, and control their business demands.
DISCLOSURES
Fund Evaluation Group, LLC (FEG), is a federally registered investment adviser under the Investment Advisers Act of 1940, as amended, providing non-discretionary and discretionary investment advice to its clients on an individual basis. Registration as an investment adviser does not imply a certain level of skill or training. The oral and written communications of an adviser provide you with information about which you determine to hire or retain an adviser. Fund Evaluation Group, LLC, Form ADV Part 2A & 2B can be obtained by written request directed to: Fund Evaluation Group, LLC, 201 East Fifth Street, Suite 1600, Cincinnati, OH 45202 Attention: Compliance Department.
This information is prepared for informational purposes only. It does not address specific investment objectives, or the financial situation and the particular needs of any person who may receive this presentation. Neither the information nor any opinion expressed in this report constitutes an offer, or an invitation to make an offer, to buy or sell any securities.
The information herein was obtained from various sources. FEG does not guarantee the accuracy or completeness of such information provided by third parties. The information in this presentation is given as of the date indicated and believed to be reliable. FEG assumes no obligation to update this information, or to advise on further developments relating to it.
Build a foundation for responsible AI adoption.
Bring governance, access, and enterprise AI controls together to help your people work with AI confidently.
Talk to us