Access review
Who can reach what today.
- Oversharing and external sharing report
- Guest and external user review
- Permission clean-up on sites, teams and folders
- Inactive sites and missing owners
Data Governance
Know where your data is, who can reach it, and what happens to it.
Microsoft Purview is the part of Microsoft 365 that finds, classifies, protects, retains and audits your information. We set it up in the order that removes the most risk first, then keep monitoring it.
- Access reviews
- Sensitivity labels
- Audit and retention
Recognise this?
Why businesses ask us about their data.
Copilot licences are on the way
Copilot can surface anything a user can already open, so access needs tidying before the licences arrive.
Sharing has built up
Sites and folders were shared with everyone, or anyone with the link, years ago and never revisited.
Someone wants evidence
An insurer, client or auditor asks who accessed what, and when, and the answer is hard to produce.
People leave with data
Files go to personal accounts or outside addresses and nobody notices until later.
The approach
The five Purview steps, in order.
We apply each step to the places your information already lives: Exchange, SharePoint, OneDrive and Teams.
Scope
What the work covers.
Classify and protect
Controls that travel with the information.
- Sensitivity labels designed with your team
- Automatic labelling for common sensitive information
- Data loss prevention for email, files and Teams
- Encryption on the most sensitive content
Retain
Keep information as long as required, then delete it.
- Retention policies by type of information
- Deletion when the retention period ends
- Holds when a matter requires them
Discover and audit
A record of who did what, and when.
- Admin activity, sharing and access requests
- File and sync activity
- Account security: admin accounts, MFA and devices
- Sign-ins after failures, from unknown countries or impossible travel
First step
Start with a data access review.
We look at how your Microsoft 365 information is shared today and show you where the biggest exposures are, in priority order.
Every control here also decides what Copilot can surface, so getting them right makes it safe to switch Copilot on. The controls are worth having even if you never do.
Book a data access reviewWhat you receive
- An oversharing and external access report
- A list of sites, teams and links to fix first
- Your licensing position for Purview features
- A recommended labelling and protection plan
Questions
Questions about data governance.
Which licences include Purview?
Microsoft 365 Business Premium includes many Purview features. Some advanced features need enterprise plans or add-ons. We map what you already hold before recommending anything.
Will labels get in people's way?
Not if we design them with the people who use them. A short list of labels that matches how your business describes information works better than a long list nobody understands.
Is this the same as backup?
No. Governance controls who can reach information and how long it is kept. Backup lets you get it back after it is lost or damaged, so you need both.
Does this make us compliant?
It gives you the controls and the evidence. Whether that meets a particular obligation depends on the obligation, which is what our Security and Compliance Audit checks.