Skip to content

AI Oversharing Self-Check

Sixteen questions that reveal whether AI - Microsoft Copilot, ChatGPT, Claude, or an internal agent - would surface data nobody meant to share. Run it before you switch on, not after.

The problem

Any AI you point at Microsoft 365 - Microsoft Copilot, an enterprise ChatGPT or Anthropic Claude deployment wired to your data, or an internal agent over SharePoint - grants nobody new access. It works with the permissions each person already has. In most tenants that means it can surface files, sites, and mailboxes that have been quietly over-shared for years, and surface them all at once, instantly, to anyone who asks the right question. This self-check is the fast version of the readiness review. Run it before switch-on: afterwards, the first person to find the salary spreadsheet will not be you.

What's inside

  • Sixteen yes-or-no questions across sharing, labelling, permissions, identity, and shadow AI
  • What a 'no' actually exposes once an assistant can search everything at once
  • The named Microsoft control that closes each gap, and where in the admin centre to find it
  • The controls that assume Microsoft Copilot licensing or SharePoint Advanced Management, flagged as such

Who it's for

  • Teams that have licensed Microsoft Copilot, ChatGPT, Claude, or an internal AI agent and are wary of enabling it
  • IT and security leads who own the rollout decision
  • Regulated teams where a leak of client or board data is a serious event

Where this leads

Before you switch on AI

AI Readiness Pack

from £15,000 / $19,200

Work the checklist yourself first - it is yours to keep. If the gaps turn out to be more than an afternoon's work, this is the fixed-scope engagement that closes them against your date.

The Switch-On Guarantee: oversharing remediated and verified, or we keep working free.

Get the AI Oversharing Self-Check

Free. We email it to you - a one-off, with no list to join unless you tick the optional box.

Get started

Find out where you stand, free

Most engagements start with a no-cost posture audit against the baselines that matter to you. If a fixed-fee roadmap is the right next step, we'll say so - and if it isn't, we'll say that too.