Microsoft 365 App Compliance Program

Microsoft's program that assesses the security, data-handling, and compliance practices of apps, add-ins, and agents that integrate with Microsoft 365, through Publisher Attestation and Microsoft 365 Certification.

Capabilities

  • Microsoft 365 Certification
    Govern Agents

    An independent yearly audit — including penetration testing and review of data handling, privacy, and security against SOC 2, ISO 27001, and PCI DSS — that certifies an app or agent, giving admins audited assurance rather than a self-declaration. Reduces the risk of trusting a third-party agent on the publisher's word alone.

  • Publisher Attestation
    Govern Agents

    A published, self-declared assessment in which an app or agent's publisher answers a standard security, data-handling, and compliance questionnaire covering more than 80 risk factors, surfaced in the agent's details so admins can evaluate it before deployment. Reduces the risk of adopting an untrusted third-party agent.

Scenarios

Solutions