// copilot assessments / copilot-meeting-insights
Copilot Meeting Insights Privacy & Coverage Audit
Teams meeting AI insights surface action items and summaries — but who can see them, and what artefacts get retained? This audit samples last-30-day meetings via the Meeting AI Insights API and scores AI insight coverage, external-attendee exposure, retention of aiInsight artefacts, the channel-meeting blind spot, action-item ownership, and cross-tenant mention privacy.
This audit needs the following before it can collect data. We will check each item before kicking off your run and prompt you if anything is missing.
Teams Application Access Policy
Microsoft requires a Teams admin grant on top of Entra consent before any app can read user-meeting resources. Without this, every meeting fetch returns 403 and the audit cannot collect data — the report will be empty.
Run the following in PowerShell as a Teams admin (Microsoft Teams module). Replace -Global with -Identity <user-upn> to scope the grant to specific users only.
Connect-MicrosoftTeams New-CsApplicationAccessPolicy ` -Identity "baref00t-MeetingInsights" ` -AppIds "d5fe328c-f23c-4007-8b5c-9430dd7b9e7b" ` -Description "baref00t Meeting Insights" Grant-CsApplicationAccessPolicy ` -PolicyName "baref00t-MeetingInsights" -Global
Single report, no commitment.
Continuous monitoring — fresh report every 30 days.
Available in AUD, USD, GBP, EUR, SGD. MSP partners get volume discounts via the partner programme.
What it scores
AI Insights Coverage
Coverage rate (% of meetings producing insights), average insight latency.
External Attendee Risk
Cross-org meetings that produced AI insights; policy posture.
Retention Coverage
Purview retention covers aiInsight artefacts; legal hold available for transcripts.
Channel Meeting Blind Spot
Channel meetings unsupported by API — qualitative warning for regulated industries.
Action Item Hygiene
Share of AI-generated action items with an assigned owner.
Cross-Tenant Mention Privacy
Named-person mentions in AI insights where the mentioned party is in another tenant.
Microsoft APIs
- Teams Meeting AI Insights API (GA)
Customer prerequisites
- Microsoft 365 Copilot licence (Business or Enterprise) assigned to at least one user with scheduled meetings
- OnlineMeetings.Read.All + OnlineMeetingAiInsight.Read.All scopes (admin-consented in the customer tenant)
Other Copilot Assessments
Pre-deployment data hygiene scoring across 7 dimensions plus live retrieval-surface measurement and an agent catalogue teaser.
Per-user, per-surface Copilot activity vs licence spend — with named-user reclaim list.
Risk-scored inventory of every Entra Agent ID (Copilot Studio etc.), the tenant-wide Copilot tool catalogue (MCP servers), and the full Copilot Package Management catalogue (third-party add-ins + Teams apps) once a probe account is connected.