Skip to content

Data governance and compliance

Keep your data governed wherever people work.

Hybrid working means your files, chats and sites are being opened from a lot more places than they used to be, so the controls around them matter more. We set up governance and compliance in Microsoft 365 that protects your data without getting in the way of the people who use it.

What we do

Governance and compliance in Microsoft 365.

Governance covers who can see what, how long content is kept and what happens when someone tries to share something they should not. We work across SharePoint, Teams and Purview so the rules are consistent from one workload to the next.

Microsoft Purview

Retention labels, file plans, data loss prevention and information protection, configured to match your policies.

Microsoft Purview

Data security as a service

An ongoing review of your security and compliance position, with reports, a roadmap and help acting on it.

Data security service

SharePoint governance

Roles, site provisioning, naming conventions and content lifecycle rules for SharePoint.

SharePoint governance

External sharing

Deciding who outside the organisation can see what, for how long, and setting SharePoint up to match.

SharePoint external sharing

AI governance

Policies and controls for Copilot and other AI tools, so they only surface what people are allowed to see.

AI governance and security

AI readiness

A check of your data, permissions and governance before you roll out Copilot or AI agents.

AI readiness assessment

20+ years

of SharePoint and Microsoft experience

2 hours

for our Copilot readiness workshop, a quick way to see where governance gaps are

1 working day

to respond to your enquiry

How we work

How a governance project runs.

01

Discovery

Workshops with IT, compliance and the business to understand your obligations, how data is shared today and where the risks sit.
02

Design

A governance model covering permissions, retention, labelling and sharing, written up for you to review and agree before anything changes.
03

Build

We configure Purview policies, labels and SharePoint and Teams settings in your tenant, testing each one before it is applied widely.
04

Train

Training for site owners and administrators so they understand the rules and know how to apply them day to day.
05

Go live

Policies are switched on in stages, with us on hand to adjust anything that gets in the way of legitimate work.

Client feedback

What it is like to work with us.

“ThinkShare were a delight to work with and supported us every step of the way with great client service and strong technical expertise.”

Grace TimperleyInternal Communications & Engagement Specialist, Shelter

“The migration went very smoothly, and our new intranet ensures our data is secure and easily accessible.”

George IrvineHead of IT, CitNOW

Case studies

Case studies we have delivered.

Retention built into the intranet

Shelter moved from a 2016 SharePoint intranet to modern SharePoint, mostly out of the box, with retention labels and policies keeping the content governed.

Read the Shelter case study

Simpler permissions for a hybrid team

Praxis moved its file server to Teams and SharePoint, with a Team per business function, cleansed data and simpler permissions for a hybrid workforce.

Read the Praxis case study

FAQ

Frequently asked questions.

What does data governance cover in Microsoft 365?

Who can access which content, how long it is kept, how it is labelled and what can be shared outside the organisation, across SharePoint, Teams, OneDrive and Exchange.

Which tools do you use?

Microsoft Purview for retention, labelling and data loss prevention, SharePoint and Teams settings for permissions and sharing, and Orchestry where you need provisioning and lifecycle management.

Will governance make SharePoint harder to use?

It should not. We design the rules with the people who use the system and apply as much as possible automatically, so staff are not asked to make classification decisions all day.

Do we need this before Copilot?

It helps a lot. Copilot answers from whatever a user can reach, so tightening permissions and tidying content first means it surfaces the right information.

Talk to our governance team.

Tell us what you are working on and we will come back to you within one working day to arrange a call.