Small business owners and IT people keep asking the same questions: "If we turn on Copilot, what can it see?" and "Who can actually open our files?" These three free resources show you where to look in Microsoft 365, using Microsoft's own admin tools and documentation. Download them, use them with your team or IT provider, and keep them; there is no form to fill in and nothing to buy.
Copilot can open anything your people already can. This one-page list shows five settings to check first, from Anyone links to admin counts, with the exact Microsoft admin center paths and sources for each.
Download the checklist (PDF)Insurance applications and client questionnaires ask who can access your customer data. This worksheet helps you find the facts in Microsoft 365 and answer Yes, No or Partly with evidence. Not legal or insurance advice.
Download the worksheet (PDF)For MSPs offering a read-only Microsoft 365 sharing review under their own name. Covers scoping, client consent, read-only app permissions, data handling, branding, delivery, and how to talk with clients without a scare pitch.
Download the MSP checklist (PDF)These resources focus on who can open what in Microsoft 365: sharing links, guests, admin roles and sharing settings. They don't cover MFA, backups, or what staff upload to ChatGPT or other outside AI tools. Those matter too. Nothing here is legal or insurance advice.
Want to see what a full read-only review looks like? See a sample report or get started. Calls are optional.
Looking for our two-page Copilot readiness checklist? It's here, sent by email.