// copilot assessments / copilot
Copilot Readiness Audit
Before you turn Copilot on, know exactly what it will surface. This assessment scores your tenant across data sprawl, sensitivity labels, DLP, identity & access, lifecycle governance, licensing, retrieval surface hygiene — and includes a teaser inventory of every agent in your Copilot/Outlook/Teams catalogue. The retrieval surface section samples the live Microsoft Search index (the same index Copilot grounds against) for surface breadth, classification coverage, external/guest crossover, and document freshness.
Single report, no commitment.
Continuous monitoring — fresh report every 30 days.
Available in AUD, USD, GBP, EUR, SGD. MSP partners get volume discounts via the partner programme.
What it scores
Data Sprawl & Oversharing
Public groups, OAuth grants, external sharing, guest access, app consent, group creation.
Sensitivity Labels
Label inventory, default label policies, auto-labelling, label analytics, container scoping.
Data Loss Prevention
DLP policy presence and coverage across SharePoint, OneDrive, Teams, and Exchange.
Identity & Access
MFA, Copilot-specific Conditional Access, session controls, legacy auth, risk policies, device compliance, phishing-resistant MFA.
Lifecycle & Governance
Guest role restrictions, inbound B2B, invitation settings, access reviews.
Licensing & Rollout
Copilot SKU detection, prerequisite SKU detection, licence assignment ratio.
Retrieval Surface Hygiene
Live Graph Search sample of the Microsoft Search index: surface breadth, classification coverage, external + guest crossover, stale-document share.
Agent Catalogue (teaser)
Quick package count, custom-engine agent detection, third-party block hygiene — funnels into the full Agent Inventory audit.
Microsoft APIs
- Microsoft Graph (universal scopes)
- Microsoft Graph Search API (CP7)
- Copilot Package Management API (preview, CP8)
Customer prerequisites
- M365 tenant with admin consent
- Files.Read.All + Sites.Read.All app scopes for CP7 retrieval-surface sampling
- Microsoft Agent 365 licence for CP8 (optional)
Other Copilot Assessments
Per-user, per-surface Copilot activity vs licence spend — with named-user reclaim list.
Risk-scored inventory of every Entra Agent ID (Copilot Studio etc.), the tenant-wide Copilot tool catalogue (MCP servers), and the full Copilot Package Management catalogue (third-party add-ins + Teams apps) once a probe account is connected.
Sample Copilot prompts and responses, PII-scan them, score compliance posture.