Stop oversharing before Copilot surfaces it.
Continuous monitoring and automated remediation of permission sprawl across your tenant.
Overview
16% of business-critical data is overshared across the average M365 tenant, with organizations averaging 802,000 files at risk. Microsoft's SharePoint Advanced Management provides discovery reports, but remediation remains largely manual and is capped at 1,000 site access reviews per month. For large tenants with thousands of sites, that's a years-long cleanup timeline, while Copilot exposes everything today.
Compass Data Access Governance Engine is a continuously running governance layer that monitors and remediates permission sprawl automatically. Scheduled Azure Functions scan for newly created sharing links, detect company-wide permissions, identify anonymous links without expiration dates, flag guest access to labeled sites, and detect permission changes that introduce broad access. When issues are found, Power Automate workflows either alert administrators or auto-remediate based on configurable policies.
Use Cases
- Pre-Copilot permission cleanup
- Ongoing governance posture monitoring
- Automated permission remediation at scale
- Guest access compliance enforcement
Key Features
Technical Architecture
Deployed in your tenantThe EchoLeak vulnerability (CVE-2025-32711, CVSS 9.3) enabled zero-click data exfiltration through Copilot. The U.S. House of Representatives and European Parliament both banned Copilot from staff devices. Automated governance prevents these scenarios.
Ready to deploy Copilot Data Access Governance?
Book a consultation and we will walk through your tenant to show exactly how this product maps to your requirements.