Find every overshared Microsoft 365 file before Copilot does.
Our read-only review covers SharePoint, OneDrive and Teams. It looks for public links, company-wide shares, stale guests and excess admins, and within about 10 business days you get a scored report with a recommendation for each finding. Renewing your IT contract or cyber insurance? We also review what you're paying for and what your insurer will ask, before you sign again.
Calls are optional: a 30-minute Zoom call if you want one. Or see a sample report.
Copilot doesn't create new access. It reveals the access you already gave away.
Copilot answers from anything a user can open. Years of "share with anyone" links, company-wide folders and forgotten guests turn into answers anyone can get by asking.
- 01Links nobody remembers"Anyone" links need no sign-in. When one gets forwarded, the file is effectively public.
- 02Org-wide by defaultBudgets, HR files and acquisition notes shared with "everyone" become searchable through Copilot.
- 03Guests who never leftFormer vendors and MSPs often keep access, and sometimes admin rights, long after the contract ends.
"Close to 60% of all data records being shared organization-wide contained sensitive information." Concentric AI, Data Risk Report 2H 2025
Oversharing concerns caused "40% to delay rollouts by three months or more" of Microsoft 365 Copilot. Gartner survey of 132 IT leaders (June 2024), via Computerworld
Approve, review, decide. Read-only, nothing to install.
Admin approves read-only access
Your Microsoft 365 administrator reviews four read-only permissions on Microsoft's own sign-in page and clicks Accept. That's the whole install.
We review your sharing settings
Every site, library and shared item is checked for link type, scope and expiry, along with guests, admin roles and tenant sharing settings.
You get a scored report
An A–F grade, a Copilot readiness verdict, and plain-language recommendations ranked by risk.
Nine checks that matter most before Copilot.
Sensitive files on public links
Payroll, SSN, contract, tax and legal file names exposed through Anyone links.
Guests holding admin roles
Outside identities that can administer your tenant.
All "Anyone" links
Every unauthenticated link across SharePoint, OneDrive and Teams.
Tenant-level sharing
Whether your organization allows Anyone links at all.
Too many Global Admins
Microsoft recommends fewer than five. Most small businesses have more than that.
Links that never expire
Public links that stay live long after the project ends.
Org-wide sharing
Content every employee and Copilot can reach.
Direct external shares
Files shared with outside email addresses.
Stale guests
Guest accounts with no sign-in for 90+ days.
Read-only, approved by your admin, removable anytime.
- Your admin approves it on Microsoft's own page. Your Microsoft 365 administrator signs in at Microsoft and sees the exact permissions before clicking Accept. We never see a password.
- Four read-only permissions. Sites.Read.All, Directory.Read.All, AuditLog.Read.All and SharePointTenantSettings.Read.All. None of them can change anything.
- We read names and settings, not contents. File and folder names, sharing links, permissions, users and guests, sign-in activity and sharing settings. We never open or download files, and we never change anything.
- You keep control. Remove access anytime in Microsoft Entra: Enterprise applications, the app named "TrueNorth Exposure Scan", Delete. Results are deleted after 90 days.
It can look. It can't touch.
Our review tool is built so that the worst case is a list of file names. It has no write permissions, never downloads documents, and blocks every write call in code.
- Metadata only: names, paths, link scopes, and who has access
- Connections use HTTPS (TLS), review results are encrypted when stored, and our review tool is hosted in U.S. Azure regions
- Review data is kept only for a limited period and deleted on request
- Revoke anytime by deleting the app in Microsoft Entra
| Sites.Read.All | Read site and file sharing metadata |
| Directory.Read.All | Read guests, admin roles and licences |
| AuditLog.Read.All | Read guest last sign-in dates |
| SharePointTenantSettings.Read.All | Read tenant sharing policy |
0 WRITE PERMISSIONS · 0 FILE DOWNLOADS
Veteran-owned, with experience behind every review.
15 years of experience
In IT infrastructure and security operations.
Industry certifications
Our team members hold individual industry security certifications.
Military service
A background built on discipline and mission focus.
Fixed prices. A clear answer on Copilot in about 10 business days.
Built for small and mid-sized businesses on Microsoft 365, and the MSPs who look after them. Every engagement uses read-only access, and we quote the price before any work starts.
Average cost of a data breach worldwide, a record. IBM / Ponemon Institute, Cost of a Data Breach Report 2026
Average cost of a US data breach, a record. IBM / Ponemon Institute, Cost of a Data Breach Report 2026
Average cost of a single negligent-insider incident. Ponemon Institute / DTEX, 2026 Cost of Insider Risks Global Report
Median pay for an information security analyst (May 2025). U.S. BLS, Occupational Outlook Handbook
Set against those numbers, a Readiness Review costs $2,500, $4,000 or $6,500 depending on your size, and Monitor costs $249, $399 or $699 a month. That's a fixed, known cost to find exposed files before they turn into an incident, and it costs less than a single month of a full-time security hire.
No sales call needed. Get started to see the price for your user count, and TrueNorth emails your agreement and invoice within 1 business day. Calls are optional. The review needs Microsoft 365; businesses on other email providers can still get the Renewal & Insurance Review.
Copilot Readiness Review
Best for: teams about to turn on Copilot who want to know what it could surface first.
You walk away with: a graded report, a go/no-go verdict on Copilot, and prioritized recommendations your IT team or MSP can work through in order.
- Up to 50 users: $2,500 · 51–150: $4,000 · 151–300: $6,500 · Over 300: custom quote
- Read-only review of SharePoint, OneDrive, Teams, guests and admin roles
- A–F score with findings ranked Critical to Medium
- 45-minute walkthrough of the findings
- Prioritized recommendations in plain language
- One rescan after your team makes changes, to check the results
- Delivered in about 10 business days
Monitor
Best for: organizations that already did the cleanup and want to know when sharing drifts again.
You walk away with: a monthly read on your exposure and early warning on new risky links and guests.
- Up to 50 users: $249/mo · 51–150: $399/mo · 151–300: $699/mo · Over 300: custom quote
- Automatic rescan every month
- Alerts when new public links or guests appear
- Score trend so you can show progress over time
- Same read-only access as the review
- 3-month minimum
MSP Partner
Best for: managed service providers running Microsoft 365 for several clients.
You walk away with: a repeatable readiness check you can offer every client under your own name.
- White-label reports with your branding
- Onboarding links for multiple client tenants
- The client relationship stays with you
- Partner rates shared by email on request; a call is optional
Renewal & Insurance Readiness Review, from $950
Microsoft 365 security is our core work. For small businesses, we also offer a read-only, remote review before your managed IT (MSP) contract or cyber-insurance policy renews.
You walk away with: a clear picture of what your contract covers, who owns your backups, and the evidence your insurer will ask for. Fixed fee $950–$1,500; works with any email provider.
Get startedLearn more about the renewal reviewNot legal or insurance advice. The renewal review is for general information and technical review only. TrueNorth Data Shield LLC is not a law firm, insurance broker or carrier. Talk to your attorney about contract terms, and to your broker or carrier about coverage and application answers.
How it works: we agree on scope and sign a contract first, then send an invoice or payment link. There is no online checkout. The service is read-only: we find and report exposure, and your team or MSP makes the fixes. Prices exclude applicable taxes.
What admins ask first.
Can the review tool change anything in our tenant?
No. It requests only read permissions, and the code refuses any write request. Nothing is modified, deleted or re-shared. You make the fixes, or your MSP does.
Do you read our documents?
No. We read sharing metadata, such as a file's name, location, link type and who it is shared with. We never download file contents, email or chat.
We don't use Copilot yet. Is this still useful?
Yes. Public links and stale guests are a data-leak risk with or without AI. Copilot just makes them easier to find.
How do MSPs use it?
You send each client an onboarding link, the client admin approves, and reports come out under your logo. You set the resale price and keep the relationship.
How do we remove access?
Delete the app named "TrueNorth Exposure Scan" in Microsoft Entra ID (Enterprise applications). Once it is deleted, the review tool can no longer get access to your tenant. We keep review data only for a limited period, and we delete it when you ask. Email hello@truenorthdatashield.com to request deletion or to ask for the current retention period.
Know what Copilot will see, before it sees it.
Book a Readiness Review, or have your MSP request partner access. Questions? Call us at (808) 795-5551 or email hello@truenorthdatashield.com.