CoreView's July 2026 governance report finds two-thirds of organizations have delayed or cancelled Microsoft Copilot rollouts over fear it will surface overshared SharePoint files.
Why It Matters
The blocker usually isn't Copilot itself, it's a decade of SharePoint sharing links nobody cleaned up. Copilot reads with the same permissions as the user asking, so if a file was ever overshared, Copilot will now surface it in a summary or search result where a human might never have found it. 75 percent of C-level executives have personally ordered a pause, more than any other management level.
What To Do About It
Before switching Copilot on for your team, run a SharePoint permissions and "anyone with the link" audit first, most tenants have never done one. Microsoft's own SharePoint Advanced Management tooling can flag oversharing risk in under an hour and is worth doing before, not after, a Copilot rollout.
Sources
Related Signals
A WatchGuard survey of 684 SMB employees across the US, UK, Germany, France and Spain found 64% use unauthorized AI tools at work, and fewer than 3 in 10 employers can accurately track what software staff actually run.
30 Jul 2026
Microsoft cut AI agent security out of standard Defender licenses on 1 July.
30 Jul 2026Um relatório da CoreView de julho de 2026 indica que dois terços das organizações adiaram ou cancelaram o Microsoft Copilot com receio de que exponha ficheiros partilhados em excesso no SharePoint.
29 Jul 2026