Stop oversharing before Copilot surfaces it.

Overview

16% of business-critical data is overshared across the average M365 tenant, with organizations averaging 802,000 files at risk. Microsoft's SharePoint Advanced Management provides discovery reports, but remediation remains largely manual and is capped at 1,000 site access reviews per month. For large tenants with thousands of sites, that's a years-long cleanup timeline while Copilot exposes everything today.

Compass Data Access Governance Engine is a continuously running governance layer built on Python Azure Functions and Azure Logic Apps that monitors and remediates permission sprawl automatically. Scheduled Durable Functions scan for newly created sharing links, detect company-wide permissions, identify anonymous links without expiration dates, flag guest access to labeled sites, and detect permission changes that introduce broad access. When issues are found, Azure Logic Apps workflows either send alert notifications via Teams and email or execute auto-remediation actions through callback Azure Functions.