Security
How we handle your data
Get time back without putting client data at risk. Secure AI built safely inside your own Microsoft 365.
Your automations run in your Microsoft 365 tenant or your own AI vendor account, with the least access needed, scoped to named mailboxes and sites. Here is exactly what we access, where it lives, and how you shut it off.
Your tenant, your accounts
Your automations run in accounts you own: your Microsoft 365 tenant, or your own AI vendor account. You keep the data and the bill, and there is no lock-in.
Automations run in accounts you own. No lock-in, no data parked on my servers. If LTS hosts a component for you, that's agreed in writing. I get delegated access to your accounts to do the work.
Least-privilege access
I ask for the least access needed to do the job, scoped to the named mailboxes and sites the work involves. Before work starts we agree in writing what I can reach, so you know exactly what I access and where it lives.
Business associate agreements
For healthcare clients, we sign a Business Associate Agreement (BAA). Protected health information (PHI) stays in your Microsoft 365 tenant or in your own AI account that is covered by your BAA.
PHI never goes through consumer AI plans. The work is designed for HIPAA safeguards.
How AI tools handle your data
Microsoft says Microsoft 365 Copilot only surfaces data a user already has at least view permission to (Microsoft Learn). That is why permissions are reviewed first: oversharing becomes AI exposure.
Microsoft also says prompts and data accessed through Graph aren't used to train its foundation models (Microsoft Learn).
Check the terms of any other AI tool before client information goes into it. Personal and consumer accounts are the risk to avoid.
Revoking access
Because the accounts are yours, you control the access. You can shut it off at any time by removing my delegated access in your own tenant or vendor account. We agree how that works at the start of an engagement.
This page is context for a conversation, not legal advice. Confirm your obligations with your own counsel or compliance lead.