Skip to content

Data policies and outbound

Connectors, HTTP calls, MCP servers and other tenants allowed where they should be, and nowhere else.

29checks

In short

Data policies and outbound is one of the 11 core modules in The Governor, Ustrema's governance app for Microsoft Power Platform, Copilot Studio and agents. It runs 29 checks every week to answer one question: Can a flow send our data to any address on the internet? Every failing check becomes a finding with an owner, closed with DLP policies, Advanced connector policies, Tenant isolation.

The question it answers

Can a flow send our data to any address on the internet?

What it measures

Each of the 29 checks looks for patterns like these, in every environment, every week:

  • Environments with no data policy
  • HTTP and custom connectors left open
  • Every outbound destination per environment, including addresses built at runtime
  • Connections to and from other tenants, including blocked attempts

What you get

Once the findings are closed and the controls are in place, your tenant has:

  • A tenant-wide data policy design
  • An approved list of outbound destinations per environment
  • Tenant isolation planned, so nothing breaks when it is switched on
  • A process for approving new connectors

Microsoft services it works with

The Governor checks that these Microsoft controls are on, and our experts configure them:

  • DLP policies
  • Advanced connector policies
  • Tenant isolation

Preview in the free Core

HTTP and custom connector exposure

The service that closes these findingsPlatform rollout and Managed Environments

Questions about this module

Is Data policies and outbound included in the platform licence?

Yes. All 11 core modules, Data policies and outbound included, come with one platform licence per tenant per year. There are no per-user fees. Extension modules are added separately.

How often does The Governor check data policies and outbound?

Every week. The scan runs inside your own tenant, measures all 29 checks again and shows what closed, what is still open and what came back since the last scan.

Which Microsoft services does it work with?

DLP policies, Advanced connector policies, Tenant isolation. The Governor checks that they are switched on and configured, and Ustrema consultants set them up when they are not.

Sources

The primary documentation and law this page relies on. Each link opens the original source.