Scan Microsoft 365 Copilot for Sensitive Data & PII

Cole PrudenData Discovery, PII, Sensitive Data Discovery, Sensitive Information

Scan Microsoft 365 Copilot for Sensitive Data and PII with PII Tools

Discover and remediate personal and sensitive data inside Microsoft 365 Copilot accounts. This includes both structured and unstructured data in Microsoft OneDrive, Microsoft Exchange Online, and SharePoint Online.

A gif showing office support in PII Tools

Full Microsoft 365 Copilot Support

Microsoft’s AI chatbot, known as Copilot, recently became an integral part of Office 365. The official name is now Microsoft 365 Copilot, and PII Tools is still fully compatible with this program.

With PII Tools, you can directly discover, review, and remediate personal and sensitive information (PII) in documents, emails, and tables shared within your company’s 365 Copilot accounts. No need to export or copy the data to external locations.

Scanning across 365 Copilot can sound a little frightening, and given the recent changes, navigating Microsoft’s enterprise is not always straightforward. So, let’s break it down.

Scanning Microsoft 365 Copilot for sensitive and at-risk data:

  • 365 Copilot is a suite of products and services (including the new AI chatbot), some of which may store personal information or sensitive data, such as names, addresses, credit cards, faces, passport scans, sexual preferences, or religious views.
  • The main services within 365 Copilot are:
    • OneDrive: A file hosting service operated as part of Office Online. There are drives for users, user groups, and entire sites.

    • Exchange Online: Hosted email, one mailbox per user. Includes a separate “In-place Archive Mailbox” service under a special license.

    • SharePoint Online: A cloud service to share and manage company data. Some documents are shared on OneDrive.

  • PII Tools lets you apply our context-aware personal data detectors to:
    • Individual users’ mailboxes, archive mailboxes, or all users in Exchange Online.
    • Drives and SharePoint sites for individual or all users.
    • Drives of single groups or all groups in OneDrive.
    • All drives and subsites for a given OneDrive or SharePoint site.

  • Technically, programmatic access to 365 Copilot happens through an API called Microsoft Graph, mgraph.
  • PII Tools comes with step-by-step instructions on how to set up and authorize 365 Copilot scans.

365 Copilot Remediation with PII Tools

The first step to ensuring any data that passes through Microsoft 365 Copilot is “wiped clean” of any sensitive or company-specific information is to scan it using PII Tools’ AI Data Protector.

AI models like Copilot use businesses’ data to train their algorithms and gather information as a third-party collector, meanwhile, AI Data Protector scans this data using your specifications first and notifies you of anything you might not want heading out the door.

You then have multiple options for how you want to remediate each detected instance of PII or company data in Microsoft 365 Copilot. The options are to erase, quarantine, encrypt, and redact all potentially at-risk data directly within the PII Tools interface. 

This applies to all emails, email attachments, and files in Microsoft 365 Copilot – Exchange Online, SharePoint Online, and OneDrive. Also, the “Secure Erase” capability will permanently and irrevocably wipe any email or file from 365 Copilot. Remember to use this helpful, but powerful, function with care!

A screenshot highlighting the remediate all button in the dashboard of PII Tools

Other Custom Features

Another useful feature is the option to delete individual email attachments independently while keeping the rest of the email.

And when it comes to the quarantine process, PII Tools copies any erased original and its metadata to a secure location of your choice for backup or later review. This allows you to retain the original file or email content, permissions, owners, email headers, etc.

Finally, you can also use PII Tools to remediate emails and files in bulk directly from a PII Analytics search. Basically this bulk remediation lets you find all affected emails within your inventory, using sophisticated search filters and classifiers, and then remediate them all at once with the click of a single button.

And That’s Not All! Discover All the Perks of Scanning Microsoft 365 Copilot Using PII Tools!