Label and review external sharing
A person checks a proposed sharing decision and its evidence.
Coming
See every demonstrationMicrosoft cloud, security, and AI implementation for regulated and mid-market organizations. Learn More →
TERMS OF ENGAGEMENT
Before any engagement starts you should know what we will read, what we will change, who approves it, how it can be reversed and what happens to your data. This page says it plainly; the signed statement of work says it precisely.
READ-ONLY FIRST
Discovery is read-only: configuration, permissions, posture reports and sample data are read, and nothing in your tenant changes until you approve a scope in writing.
The statement of work lists the systems read, the access used and the people who hold it. Access is granted through your Microsoft Entra tenant, scoped to the engagement and time bounded, and removed at handover.
THE MICROSOFT INSIGHT
A preview feature is never described as available and never relied on for a control the engagement depends on; it is labeled with the date it was checked and recorded as a candidate for the next review.
Microsoft Defender threat detection for Agent 365 managed agents, in public preview, raises near real time alerts for jailbreak attempts, indirect prompt injection, credential leakage and suspicious access. (Microsoft Learn, checked Nov 4, 2026, preview)
Plan on what is generally available and the plan survives the next Microsoft announcement. Plan on a preview and the plan is renegotiated when the preview changes.
APPROVAL AND ROLLBACK
Your named owner approves each scope in writing, every planned change has its rollback written before it is made, and a pilot runs before any wave.
YOUR DATA
It stays in your tenant: Simplicity IT works inside your Microsoft environment, uses sample or fictional data for tests where the work allows, and keeps no copy of your business data after handover.
Operating records the firm keeps are about the engagement (scopes, decisions, approvals, runbooks), not your customer or employee data. Where a Microsoft feature processes data outside a boundary you care about, the engagement states it with the Learn source and the date.
Data that stays in your tenant is governed by your controls. Data that leaves it is governed by someone else's.
CLAIMS AND PRICES
That a system cannot be breached, that compliance is assured, that it holds a certification it does not hold or a Partner Center designation it does not have, that a preview feature is available, a real client's name, or a price before the scope is known.
Every proposal is quoted after a scoping call. Microsoft funding is stated as "Microsoft-funded where you qualify", with eligibility checked for your tenant first. Assessment and implementation are separate scopes, and there is no refund tier because there is no payment before a scope you approved.
AFTER TWO WEEKS
HONEST ABOUT LIMITS
It does not make a compliance, security or certification claim on your behalf. Microsoft Agent 365 is the control plane that observes, governs and secures agents built on Microsoft platforms or acquired from third parties, through the Microsoft 365 admin center, Microsoft Entra, Microsoft Purview and Microsoft Defender. (Microsoft Learn, checked Oct 31, 2026) The engagement produces evidence through the controls you run; your compliance officer, your auditor or your assessor owns any attestation.
It does not replace the signed statement of work: this page says it plainly, the document says it precisely, and the document governs.
It does not grant Simplicity IT standing access: access ends at handover unless a managed service with its own authority matrix is signed.
THE ONE THING TO REMEMBER
Said another way: nothing changes until you say so, and anything that changes can be put back.
Said a third way: the statement of work is precise; this page is the plain version of it.
SHOW YOUR WORK
A person checks a proposed sharing decision and its evidence.
Coming
See every demonstrationDIRECT ANSWERS
No. The signed statement of work governs each engagement. This page states the rules every statement of work follows, in plain words.
Read access scoped to the engagement for discovery, granted through your Microsoft Entra tenant and time bounded. Write access is added only for an approved scope and removed at handover.
No. The firm works inside your tenant and keeps engagement records (scopes, decisions, approvals, runbooks), not your business data.
Yes, at any gate. Each phase ends in your written decision, and no phase is billed before its scope is approved.
Quoted after a scoping call, assessment separate from implementation, Microsoft-funded where you qualify. No price is published and no payment precedes an approved scope.
USING THIS WEBSITE
The sections above describe an engagement. This part covers the website itself: what you may do here, what the free checks and tools are and are not, and what happens to what you type. Last updated 8 November 2026.
Simplicity IT Inc. provides this website to describe its services and share general information. You may read, download and share the publicly available materials for your own evaluation. Do not misuse the site, attempt unauthorized access, interfere with its operation, or submit information you are not permitted to share.
The free checks, the Governed AI Blueprint, the AI Governance Simulator, the AI Use Policy Builder, the Agent Inventory Builder and the Vendor AI Questionnaire produce general information from the answers you give. A readiness band, a roadmap, a policy, an inventory or a questionnaire is a starting point for your own review, not a security certification, a legal opinion, a compliance determination or a promise that a particular result will occur. Adapt any generated document to your organization and have the people who own the decision read it before it is used. A formal engagement requires a separately agreed scope.
Your answers to a tool are sent to our server only to compute the result and are discarded once it is returned; nothing from a tool is stored unless you choose to send a form. The result and the browser register stay on your device until you clear them. An optional "Was this useful?" note reaches our team as a message and is not tied to you. When you do send a form, the details you enter are used to deliver what you asked for and to respond to your inquiry, as described in the privacy policy. Do not enter credentials, regulated customer records, protected health information or sensitive case material into any tool or form; use fictional or sample data where the tool asks for examples.
Submitting an inquiry, requesting a document or booking a call does not create a customer relationship and does not require either party to buy or provide services. We handle personal information under our privacy policy.
Any services we provide are governed by the signed agreement for that engagement. If this page conflicts with a signed agreement, the signed agreement controls. Product links on this site lead to products made by Simple Intelligence Group, a separate company with its own terms.
Text, images, checklists, downloads and generated documents on this site belong to Simplicity IT Inc. or are used with permission. Reading or downloading them does not transfer ownership. Links to Microsoft, video platforms or other third-party sites are provided for convenience; those sites have their own terms and privacy practices.
We may update site content, links, tools and downloads. We aim to keep them accurate and available, but website information can become outdated or temporarily unavailable, and Microsoft facts carry the date they were checked. Contact us if a page appears incorrect.
Use the Contact page for questions about this website or these terms.
NEXT STEP
Choose a focused check, or speak with the team about the workflow you need to improve.