Supporting technical capability
Check Microsoft 365 data access before your Copilot rollout.
Review SharePoint and OneDrive permissions, find sensitive content shared too broadly and prioritize corrections. You receive access findings and a plan for the changes needed before the Copilot pilot.
Engagement context
Where this capability applies.
- A Copilot rollout is on the table and nobody can say what it would expose.
- You cannot list who can open your HR and finance files today.
- You need written proof of what is exposed before you approve switching AI on.
The agreed outputs
What the engagement provides.
Copilot Oversharing Trace + Exposure Heat Map
Where sensitive data sits, who can already reach it, and which locations Copilot would draw on, risk-ranked by site.
Copilot-readiness verdict
A straight verdict you can act on: go ahead, go ahead with limits, or wait until the sharing is fixed.
90-day implementation plan
The oversharing to close first so Copilot can stay on, scoped to what each role should see.
Worked example
Copilot Oversharing Trace + Exposure Heat Map
An illustration of the record an engagement can produce. Names and figures are constructed for this example.
Illustrative content. The engagement record is developed from the client’s own environment and agreed scope.
Commercial & delivery basis
The scope and conditions of the work.
Delivery window
5 days
Included scope
- A scan of where sensitive files sit and who can open them today
- A check of what is shared company-wide or with outside guests
- Copilot-readiness verdict
- 90-day implementation plan
Scope assumptions
- Microsoft 365 files and sites only
- No review of the contents of the files, only of who can open them
Exclusions
- Hands-on fixes to the exposure (scoped separately)
- Copilot licensing or deployment
Required access
- Read-only access to SharePoint, OneDrive, and Teams sharing permissions
- A list of the sites and folders holding your most sensitive files
- A 30-minute kickoff with a data owner
Acceptance
The agreed completion standard.
The engagement is complete when the exposure heat map, readiness verdict, and implementation plan are delivered and walked through.
Discuss the work
Tell us what you need to change.
Share the systems involved, why the change is needed and your deadline. We clarify the work, responsibilities and information needed for a proposal.
Request an Architecture Briefing