AI Risk Report

Microsoft 365 Copilot returns whatever content the person asking already has permission to see. That makes existing oversharing an AI problem: a SharePoint site shared too widely, a stale guest account, or a missing sensitivity label all become ways for Copilot to surface content to someone who should not see it.

The AI Risk Report assesses a customer tenant against that risk and produces a scored, exportable report you can take to the customer. It answers two questions at once: is this tenant ready to deploy Copilot? and what would Copilot expose if we turned it on today?

Find it at Reports > AI Risk Report.

This report is in Beta. It is available under the Beta menu while the assessment areas are completed. Some panels show a Coming soon overlay with a preview of the detail that will appear there. Treat the scores as directional for customer conversations, and confirm findings before committing to remediation work.

Select a customer first. The report is per-tenant. Until you pick one you will see "Select a customer to view the AI Risk Report."