M365 AI Safety Audit
Know what AI can see in your tenant, before you switch it on.
A comprehensive data and configuration audit of your Microsoft 365 tenant. More than 60 audit points across Entra, Purview, SharePoint, Teams and OneDrive, run remotely over four to six weeks, so you understand precisely how Copilot and other AI tools will use your data, and how to fix it.
Every over-shared file in your tenant becomes searchable, by everyone who already has access to it, the day Copilot goes live. Finding out from a client, or from a leaver’s inbox, is the expensive way to learn what an audit would have told you in six weeks.
From £7,750
Depending on tenant size. Excludes VAT. Remote, with secure access only.
What Copilot (or other AI tools) reveal to the workforce
This is what Copilot can already see in a typical tenant.
Businesses about to roll out Copilot
Copilot works within every permission your tenant already has. If sharing has drifted for years, AI will surface it in seconds.
Firms handling client data
Professional services, finance, legal, healthcare. Anywhere a client would be alarmed by what a colleague could find.
IT teams of one or two
You know the tenant needs a look. You do not have the tools or the time to do it properly.
Copilot can see… Documents shared beyond their team
FILE
SHARED WITH
Salaries 2026 FINAL.xlsx
Everyone
Client contracts (archive)
Anyone with the link
Board pack Q3.pptx
Board
Redundancy options v2.docx
Everyone
Pipeline forecast.xlsx
Sales team
Leaver handover notes
Company (inherited)
Supplier price list.pdf
Ops team
Illustrative example based on real findings. Red rows are what the audit finds first.
What is included in the AI Safety Audit
Every relevant surface of M365 reviewed.
This is the full scope from the deck we walk you through on a call, written down so you can forward it.
Every tile is a check we run against your tenant. Six areas, ten points each.
Entra ID
Identity, guests and admin roles
Purview
Labels, DLP and retention
SharePoint
Sites, permissions and sharing links
Teams
Channels, guests and external access
OneDrive
Personal sharing and leavers
Copilot readiness
Settings, scope and restricted search
Entra, Purview, SharePoint, Teams and OneDrive configuration reviewed against more than 60 audit points
A deep dive into how data is actually shared inside your organisation today
Specialist tooling and a decade of Microsoft 365 management experience applied to your tenant
Run remotely over four to six weeks with global reader privileges. Nothing is changed
A full written findings report, with every risk prioritised and a remediation for each
A one-page executive summary written for the board
A playback session with your IT team to walk through findings and next steps
How it runs
Step by step, with the timings
The findings report
Every risk, its severity, where it lives and how to remediate it. Written in technical language for a technical audience.
The board summary
Three pages: what we found, what it means, what it costs to fix. Written in business language and jargon free.
A remediation plan
A clear list of remediations, prioritised by risk.
What are the outcomes?
Three documents that give you clarity and certainty.
“An MD told us his Microsoft Copilot rollout was getting worse the more people used it. A permissions audit found out why in a week.”
From our write-up on Copilot rollouts
Audit points checked in every tenant
Download an example report
See what this looks like before committing.
We would rather you read what we actually produce than simply take our word for it. Enter your details to the right and we'll send over a redacted report we ran for a prior client, so you can see the value (and some of the things you might find in your own tenant!) for yourself.
Questions we get asked
Before you book
Does the audit change anything in our tenant?
No. We work with global reader privileges only. You receive recommendations and a remediation order; your team or ours makes the changes afterwards, under change control.
Why does the price depend on tenant size?
We have not bought Copilot yet. Is it still worth it?
Can you do the remediation as well?
How long does it take?
What if you find nothing to fix?