Is your Microsoft 365 quietly leaking data?

Most exposure is not a breach — it is access and sharing that drift out of policy over months. Run our 18-point self-check and see exactly where your tenant is exposed, and what to fix first.

18 concrete checks across sharing, access, email fraud, Copilot/AI and data residency
A “check it yourself” line for every item — the exact Microsoft 365 setting to look at
Self-scoring: know in 10 minutes whether you are solid, exposed, or high-risk

EU-hosted GDPR-aligned No third-party AI Read-only by default CSA STAR Level 1

Get the checklist

Free PDF, instant access. We will also send a few short follow-ups you can unsubscribe from anytime.

Free PDF, instant access. We never share your address. One-click unsubscribe in every email.

You’re in. 🎉

Your checklist is ready — grab it now, and check your inbox for the follow-ups.

⬇ Download the checklist (PDF) Or skip the manual work → run the free 15-min audit

What’s inside

18 checks, 5 areas, one score

Each check tells you the risk and where to verify it. Tick what you cannot confidently rule out, add up your score, and read what to do next.

Sharing & external exposure

Anonymous links, stale guests, no-expiry shares, invisible external domains.

Cyber

Identity & access rights

Owners, lingering temporary access, admin sprawl, MFA gaps, orphaned accounts.

Cyber

Email & fraud

Impersonation in inboxes, missing warning banners, silent forwarding rules.

Guard

Sensitive data & Copilot/AI

Unknown locations, unlabeled files, Copilot over-exposure, non-EU AI processing.

Ask

Sovereignty & governance

Provable EU data residency, GDPR evidence, runaway Teams/SharePoint sprawl.

EU edge