baref00t.io

// copilot assessments / copilot-meeting-insights

Copilot Meeting Insights Privacy & Coverage Audit

Teams meeting AI insights surface action items and summaries — but who can see them, and what artefacts get retained? This audit samples last-30-day meetings via the Meeting AI Insights API and scores AI insight coverage, external-attendee exposure, retention of aiInsight artefacts, the channel-meeting blind spot, action-item ownership, and cross-tenant mention privacy.

Before you buyOne admin action is required

This audit needs the following before it can collect data. We will check each item before kicking off your run and prompt you if anything is missing.

  • Teams Application Access Policy

    Microsoft requires a Teams admin grant on top of Entra consent before any app can read user-meeting resources. Without this, every meeting fetch returns 403 and the audit cannot collect data — the report will be empty.

    Run the following in PowerShell as a Teams admin (Microsoft Teams module). Replace -Global with -Identity <user-upn> to scope the grant to specific users only.

    Connect-MicrosoftTeams
    New-CsApplicationAccessPolicy `
      -Identity "baref00t-MeetingInsights" `
      -AppIds "d5fe328c-f23c-4007-8b5c-9430dd7b9e7b" `
      -Description "baref00t Meeting Insights"
    Grant-CsApplicationAccessPolicy `
      -PolicyName "baref00t-MeetingInsights" -Global
One-off
$529

Single report, no commitment.

Monthly
$65/month

Continuous monitoring — fresh report every 30 days.

Available in AUD, USD, GBP, EUR, SGD. MSP partners get volume discounts via the partner programme.

What it scores

MI1

AI Insights Coverage

Coverage rate (% of meetings producing insights), average insight latency.

MI2

External Attendee Risk

Cross-org meetings that produced AI insights; policy posture.

MI3

Retention Coverage

Purview retention covers aiInsight artefacts; legal hold available for transcripts.

MI4

Channel Meeting Blind Spot

Channel meetings unsupported by API — qualitative warning for regulated industries.

MI5

Action Item Hygiene

Share of AI-generated action items with an assigned owner.

MI6

Cross-Tenant Mention Privacy

Named-person mentions in AI insights where the mentioned party is in another tenant.

Microsoft APIs

  • Teams Meeting AI Insights API (GA)

Customer prerequisites

  • Microsoft 365 Copilot licence (Business or Enterprise) assigned to at least one user with scheduled meetings
  • OnlineMeetings.Read.All + OnlineMeetingAiInsight.Read.All scopes (admin-consented in the customer tenant)