A 12-question readiness check on Microsoft 365 Copilot oversharing. Answer honestly, get a score, and get the one thing to fix first — before Copilot surfaces the salary file to the summer student.
No. It cannot see your tenant. It is a self-assessment scored from your own answers — it tells you which known oversharing exposures you have not yet closed, and which one to close first. If you want the real thing measured inside your tenant, that is a paid engagement and we will say so plainly.
No. The page is static HTML and JavaScript. There is no form submission, no fetch call, no analytics on the answers, and no email gate. You can disconnect from the internet and it still works.
No — you have to fix the reachable-and-sensitive intersection first. Most tenants have far more oversharing than they can clean in a quarter. The pragmatic order is: contain Copilot's search scope, kill the "Anyone" links, fix the site-level Everyone grants, then label the content that actually matters. Boiling the ocean is how Copilot rollouts stall for a year.
Start with Microsoft's documentation on Copilot data, privacy and security and on Restricted SharePoint Search, which is the built-in way to constrain Copilot's reach while you clean up. We link to the source rather than paraphrase it.
Honesty note. This tool contains no benchmarks, no industry averages and no statistics — because we will not publish numbers we have not measured. Your score is arithmetic on your own twelve answers, nothing more. It is a self-assessment, not an audit, and it is not legal, privacy-law or compliance advice. Microsoft 365, Copilot, SharePoint and Purview are Microsoft products; Integrated IT Support Inc. is not affiliated with Microsoft.
Integrated IT Support Inc. · Whitby, Ontario · Last reviewed 2026-07-14