131.8 TB
of data scanned for sensitive content
105 million
sensitive-content matches identified
96%
Microsoft Purview adoption across 11,000 licensed users

The challenge

A global engineering and technology company turned on Microsoft 365 Copilot before its data governance was ready. About 100 SharePoint sites and 555 OneDrive accounts were overshared, so Copilot could surface content to people who shouldn’t see it. Employees were also using personal AI tools that IT, security and legal couldn’t see.

What we did

  • Scanned on-premises file shares, SharePoint and OneDrive for sensitive content, including 566,207 on-premises files.
  • Built the Microsoft Purview foundation: sensitivity labels rolled out in three waves, data loss prevention, Data Security Posture Management for AI and lifecycle management.
  • Gave IT, security and legal visibility into how AI is used, across both Microsoft 365 tenants.
  • Replaced a third-party email security service with Microsoft Defender for Office 365 for all 11,000 users, with no disruption.
  • Trained IT and security leaders to run it, with guidance for employees and train-the-trainer sessions.

What’s next

Trained through the project, the company’s IT and security leaders now run data governance themselves.

All customer stories