Data protection & insider risk
When someone resigns, you cannot say what they took with them
Departing employees walk out with client lists. Forgotten "anyone with the link" shares sit live in SharePoint. Sensitive files sync to personal devices. You have no map of where sensitive data lives or who can reach it.
What this looks like in real life
A growing agency lost a senior account manager to a competitor. Within a week, two clients mentioned that the competitor seemed to already know their pricing. Nobody could say what the manager had taken, because half the client folders in SharePoint were shared "anyone with the link", sensitive files had synced to a personal laptop that was never wiped, and there was no record of what had been downloaded or when.
What was at risk
- Client lists and pricing potentially walking out the door with no audit trail.
- Live "anyone with the link" shares sitting open across the busiest sites.
- No way to tell leadership what had actually been exposed.
What the engagement produced
A risk-ranked map of where sensitive data lived and who could reach it, the open shares and sync paths flagged first, and a prioritized list to close the highest-exposure locations, so the next departure would not be a guessing game.
The fixed-price answer
One diagnostic resolves it
One fixed fee, agreed before any work starts. The number moves with tenant size and how many sites or mailboxes are in scope. Compact scopes cover smaller single-tenant environments where they apply.
The diagnostic
Copilot & Shadow AI Exposure Report
The report carries the Copilot name because one Purview scan answers both questions. Here it answers yours: where sensitive data lives, which locations are overshared, and who can reach them across your top sites, highest exposure first.
What you walk away with
What the evidence looks like
A representative deliverable. Yours is built on your own tenant.
Senior-delivered
One senior engineer scopes it and runs it, start to finish.
Read-only access
Settings and permissions only are inspected. No files are opened and no data is moved.
Fixed scope
A defined deliverable and a definition of done, agreed before anything starts.
Not sure this is the one?
Talk through the problem. The reply confirms whether this assessment fits, or points you to the one that does. The engineer who scopes it is the one on the call.
Talk through the problemWhat happens next
- 1Describe the situationA few short fields: company size, environment, and what is going wrong.
- 2A reply within one business dayA first read of what you sent, and if it is a fit, a private scheduling link.
- 3A fixed-fee proposalNamed scope, price and definition of done. No obligation.
$3,450 to $4,500
Stop Sensitive Data Leaks