Skip to content

Data protection and oversharing

The SharePoint sites, Dataverse tables and mailboxes your apps and agents use, shared on purpose.

26checks

In short

Data protection and oversharing is one of the 11 core modules in The Governor, Ustrema's governance app for Microsoft Power Platform, Copilot Studio and agents. It runs 26 checks every week to answer one question: What can our agents read that they should not? Every failing check becomes a finding with an owner, closed with Microsoft Purview, Sensitivity labels, SharePoint Advanced Management, Dataverse.

The question it answers

What can our agents read that they should not?

What it measures

Each of the 26 checks looks for patterns like these, in every environment, every week:

  • Agent knowledge sites open to the whole organisation
  • Sites without a sensitivity label or an owner
  • Sensitive Dataverse columns without field security
  • Generative AI data moving across regions

What you get

Once the findings are closed and the controls are in place, your tenant has:

  • A list of every site your apps and agents use
  • Sharing and labels fixed on those sites
  • Field security on sensitive tables

Microsoft services it works with

The Governor checks that these Microsoft controls are on, and our experts configure them:

  • Microsoft Purview
  • Sensitivity labels
  • SharePoint Advanced Management
  • Dataverse

Preview in the free Core

Sharing wide open

The service that closes these findingsData protection for AI

Questions about this module

Is Data protection and oversharing included in the platform licence?

Yes. All 11 core modules, Data protection and oversharing included, come with one platform licence per tenant per year. There are no per-user fees. Extension modules are added separately.

How often does The Governor check data protection and oversharing?

Every week. The scan runs inside your own tenant, measures all 26 checks again and shows what closed, what is still open and what came back since the last scan.

Which Microsoft services does it work with?

Microsoft Purview, Sensitivity labels, SharePoint Advanced Management, Dataverse. The Governor checks that they are switched on and configured, and Ustrema consultants set them up when they are not.

Sources

The primary documentation and law this page relies on. Each link opens the original source.