Copilot uses the same permissions as your employees. If confidential data is overshared, Copilot will find it — and surface it to people who should never see it. Copilot Readiness — Oversharing Audit scans your M365 environment using AvePoint Insights and delivers a risk map with actionable recommendations within one month.
Is This for You?
- You are planning a Microsoft 365 Copilot deployment but don't know how broadly your data is shared
- You already have Copilot but no one has verified whether data permissions are correct
- Employees share files via broad sharing links — without oversight
- Guest accounts in your tenant have access to data no one remembers granting
- Your organisation is subject to NIS2, DORA, or GDPR and needs evidence of access control
What You Get
- One-month AvePoint Insights subscription — tool for continuous data exposure monitoring
- Scan report — full picture of oversharing across SharePoint, OneDrive, and Teams
- Identified risks with recommendations — prioritised remediation actions
- AvePoint Insights training — knowledge transfer to your team
- Configuration ready for full deployment — continue with the same tool after the audit
How It Works
- Risk definition — we agree on what "sensitive data" and "exposure" mean in your organisation
- Configuration and scan — AvePoint licence activation, M365 connection, scan launch
- Analysis and report — we review dashboards, create risk lists and recommendations
- Handover and training — we walk through results and transfer the tool and knowledge
Timeline and Cost
- Work starts: within 2 business days of signed order
- Report with recommendations: within 4 weeks of audit start
- Service cost: from PLN 12,000 net (setup, scan, report, training)
- AvePoint licence: EUR 2.40 net / user / month
What's Not Included
- Implementing recommendations (changing permissions, configuring DLP, sensitivity labels)
- Full deployment of AvePoint Insights as a permanent tool
- AI agent governance policies (see: Copilot Governance & Compliance)
- Microsoft 365 Copilot deployment and licensing
Frequently Asked Questions
Does the audit require access to file contents? No. AvePoint Insights analyses metadata, permissions, and sharing configuration — it does not read document contents.
What if the results show serious risks? The report contains prioritised recommendations. We can help with remediation as a separate project.
Can I continue using AvePoint after the audit? Yes — the configuration is ready for full deployment. Just extend the licence.
How large an environment can be scanned? The scan covers the entire M365 tenant — SharePoint Online, OneDrive for Business, Teams. No size limits.
Hard Numbers
- From one sample scan: 2.3 million sensitive items detected
- Of those classified as at risk: 1.7 million
- Share of potentially overshared sensitive files: 74%
- Time to first results: 1 month
Next Step
Book a risk definition workshop. We will start the audit within 2 business days of your order and deliver the report with recommendations within 4 weeks.
📧 [TO BE CONFIRMED]