What is the hosting environment or service model used to run your app?
Paas
Which hosting cloud providers does the app use?
Azure
Customer support contact.
info@letscopilot.com
Questions
Questions or updates to any of the information you see here? Contact us!
How the app handles data
This information has been provided by &samhoud about how this app collects and stores organizational data and the control that your organization will have over the data the app collects.
Information
Response
Does the app or underlying infrastructure process any data relating to a Microsoft customer or their device?
Yes
What data is processed by your app?
1: the user's Azure tenant ID; the user's Microsoft user ID; (all retrieved) 2: the user's job function; the user's job sector; whether or not the user is a manager; the user's tasks and responsibilities; the user's self- assessed experience level with AI; the Office 365 applications the user reports working with (all self-reported).
Does the app support TLS 1.1 or higher?
Yes
Does the app or underlying infrastructure store any Microsoft customer data?
Yes
What data is stored in your databases?
1: the user's Azure tenant ID; the user's Microsoft user ID; User profile data from MS Graph (all retrieved) 2: the user's job function; the user's job sector; whether or not the user is a manager; the user's tasks and responsibilities; the user's self- assessed experience level with AI; the Office 365 applications the user reports working with (all self-reported). 3: Recent interactions with the bot.
If underlying infastructure processes or stores Microsoft customer data, where is this data geographically stored?
Netherlands (the)
Do you have an established data rentention and disposal process?
No
How long is data retained after account termination?
More than 90days
Do you have an established data access management process?
Yes
Do you transfer customer data or customer content to third parties or sub-processors?
No
Questions
Questions or updates to any of the information you see here? Contact us!
Does the app perform automated decision making, including profiling that could have a legal effect or similar impact?
No
Does the app process customer data for a secondary purpose not described in the privacy notice (i.e. marketing, analytics)?
No
Do you process special categories of sensitive data (i.e. racial or ethnic origin, political opinion, religious or philosophical beliefs, genetic or biometric data, health data) or categories of data subject to breach notification laws?
No
Does the app collect or process data from minors (i.e., individuals under the age of 16)?
No
Does the app have capabilities to delete an individual's personal data upon request?
No
Does the app have capabilities to restrict or limit the processing of an individual's personal data upon request?
N/A
Does the app provide individuals the ability to correct or update their personal data?
N/A
Are regular data security and privacy reviews performed (for example, Data Protection Impact Assessments or privacy risk assessments) to identify risks related to the processing of personal data for the app?
No
Questions
Questions or updates to any of the information you see here? Contact us!
Information
Response
Does your application integrate with Microsoft identity platform (Microsoft Entra ID) for single-sign on, API access, etc.?
Yes
Have you reviewed and complied with all applicable best practices outlined in the Microsoft identity platform integration checklist?
Yes
Does your app use the latest version of MSAL (Microsoft Authentication Library) or Microsoft Identity Web for authentication?
Yes
Does your app support Conditional Access policies?
No
Does your app support Continuous Access Evaluation (CAE)
No
Does your app store any credentials in code?
No
Apps and add-ins for Microsoft 365 might use additional Microsoft APIs outside of Microsoft Graph. Does your app or add-in use additional Microsoft APIs?
No
Data access using Microsoft Graph
Graph Permission
Permission Type
Justification
Microsoft Entra App ID
TeamsActivity.Send
application
Intermittently send notifications to users to remind/encourage them to continue their learning journey
Ce module examine comment Microsoft 365 Copilot respecte les obligations de confidentialité et de conformité existantes, comment il garantit la résidence des données et la limite de conformité, et comment il protège les données métier sensibles.
Expliquez les principes de base de la sécurité des données, de la gestion de cycle de vie, de la sécurité des informations et de la conformité pour protéger un déploiement Microsoft 365.
