Get your SharePoint content ready for Copilot

If you are preparing SharePoint for Copilot, start with the content. Copilot answers from what your people can already open, including pages nobody has checked in years and sites or files open to everyone in the organization. We build the Dexy Trust Scorecard into your own Microsoft 365. It gives your content a Trust Score out of 100 and gives each page and document a named owner and a review date.

Book a scoping call

68/ 100

Trust Score

68 / 100 · Needs attention

How far your people and AI can trust your SharePoint content. By default it combines AI readiness and Security equally, and you can change the weighting. Poor security caps it, however tidy your content is.

72/ 100

AI readiness

72 · Needs attention

Owned, up to date and free of duplicates.

64/ 100

Security

64 · Needs attention

Items open to everyone, Anyone links, guest access, and direct shares to individuals.

Sample figures from Northwind Legal.

AI readiness measures whether content has a current owner, has been updated in the last 12 months, has labels and metadata, and is free of duplicates. It also checks that each site has at least two owners. Security measures how widely content is shared: Anyone links, sites open to everyone in the organization, links with no expiry date, guests, files shared with individuals instead of groups, and sites with many unique permissions. Scores fall into three bands: Good (80 and above), Needs attention (60 to 79), and At risk (under 60).

Sample Dexy Trust Scorecard dashboard for Northwind Legal, showing a Trust Score of 68 out of 100. — Overview for the whole organization: the Trust Score out of 100, the AI readiness and security scores that make it up, overdue reviews, content with no owner, and the lowest-scoring sites.

What we add to SharePoint

A named owner and a review date for each page and document that needs one.
A "due for review" list for each owner, with a one-click "Still accurate" button.
Reminders in Microsoft Teams, escalated to the site owner if nobody responds.
Duplicate, out-of-date, and abandoned content flagged, so owners can update or remove it before Copilot answers from it.
A Trust Score for each site and for the whole organization, with AI readiness and security shown underneath.
A report on lists and libraries across the organization, flagging ones that are stale, very large, or have their own permissions.
A storage report with an estimate of the space clean-up could free. It makes recommendations only and never deletes anything.
It runs inside your own Microsoft 365. Nothing is hosted by us. People see dashboard data for their role, and files stay in your Microsoft 365.

How the service works

Copilot gives better answers when the pages it reads are current and someone is responsible for them. Most SharePoint sites have no record of who owns a policy page or when it was last checked, so out-of-date guidance stays live and nobody is asked to fix it. The Dexy Trust Scorecard adds that record, then keeps owners on schedule.

We build it for your organization. As part of the project, we set up the Dexy Trust Scorecard in your own Microsoft 365, agree which sites to include, and choose how often each type of content is reviewed: every 3, 6, 12, or 24 months.
The first scan scores every site. You get the Trust Score, with AI readiness and security underneath, for the organization and for each site, with the lowest-scoring sites listed first.
You get an assessment report. It lists the main findings, the riskiest sites, and recommended actions ranked by effort and impact, and you can print it or save it as a PDF.
Owners keep content current. They get reminders before content is due, confirm it is still accurate or update it, and reassign anything that is not theirs. You can rescan at any time, and the overview shows how the Trust Score has moved over the last eight weeks.

If you want help with the fixes the report recommends, we scope that work on the same call.

Dashboard screenshots

Sample list of SharePoint sites with Trust Scores and sharing risk. — Every site in scope, with its Trust Score, owners, overdue items, labels, and sharing risk. Filter by hub, score band, or site type.

Sample site detail view with a score breakdown and a list of pages and documents. — One site in detail: what makes up its AI readiness and security scores, and each page and document with its owner, review date, and status. Assign owners or set review intervals for many items at once.

Sample list of overdue content reviews. — Content past its review date, and content with no owner. Send a reminder, reassign it, or mark it as reviewed.

Sample Teams reminder asking an owner to review a page. — Reminders to content owners in Microsoft Teams: a preview of the message, the reminder schedule, when to escalate, and a log of every reminder sent.

Sample oversharing view for Northwind Legal, with a security score of 64 out of 100. — Oversharing and access: the security score and what lowers it, including Anyone links, links for the whole organization, links with no expiry date, guests, and access for "Everyone except external users". The ten riskiest sites are listed, including the Harbourline client extranet, and you can notify an owner from any row.

Sample report of SharePoint lists and libraries with flags. — Every list and library across the organization, flagged when it has not changed in 12 months, has its own permissions, or is very large.

Sample storage report with clean-up estimates. — Storage across your sites: old file versions, recycle bins, files older than five years, duplicates, and an estimate of what clean-up could free. Storage is reported separately and does not count toward the Trust Score. This view recommends only and does not delete anything.

What site owners and staff see

Owners review their content where they already work, on the SharePoint site itself. Nobody needs to learn a new tool to say a page is still right.

Sample SharePoint page with a list of content for the owner to review. — "My reviews" on a SharePoint page. Owners confirm a page is still accurate, open it to update it, or say it is not theirs so the site owner can reassign it.

Sample page details panel showing the page owner and review date. — The page details panel shows the owner, the review date, how often the page is reviewed, its sensitivity label, and the health of its site. People looking at the page can request a review from the owner.

Sample dashboard as seen by a site owner, limited to one site. — Site owners see a live view of their own site and nothing else.

Sample view for a content owner, showing only their own reviews. — Everyone else sees only their own reviews. Scores for the whole organization stay with admins.

How it works with SharePoint Advanced Management

If at least one person in your organization is assigned a Microsoft Copilot license (the paid add-on, not Microsoft Copilot Chat), your SharePoint admins automatically get SharePoint Advanced Management. A few of its features still need the standalone SharePoint Advanced Management add-on, or an E5 or G5 license. Organizations without Copilot can buy SharePoint Advanced Management separately. Its tools focus on access, and they work site by site: reports on who can see what, site access reviews, and policies for inactive sites and sites with too few owners. We recommend using them.

The Dexy Trust Scorecard works alongside SharePoint Advanced Management and does not replace it. You can import the data access governance reports from SharePoint Advanced Management, and from the oversharing view go through to the SharePoint admin center to start a site access review. What the Dexy Trust Scorecard adds is at the level of each page and document: an owner, a review date, reminders, and reports on lists and storage. The assessment report includes a side-by-side comparison.

Sample assessment report

See the format and depth of a full assessment before you talk to us. The sample report shows the Trust Score for Northwind Legal, the AI readiness and security scores behind it, each finding with its evidence and the fix, and the licenses each fix needs.

Cover of a sample Trust Scorecard report for Northwind Legal. — Cover: the Trust Scorecard title, the organization, the scope of the assessment, and the scan date.

Sample report summary showing a Trust Score of 68 out of 100. — Summary: a Trust Score of 68, made from AI readiness at 72 and security at 64, with what we found and what we recommend first.

Sample report table of security signals and AI readiness factors. — Scores in detail: each security signal and AI readiness factor, how often it appears, and how much it moves the score.

Sample report findings ranked by risk. — Findings ranked by risk, each with the evidence and the recommended fix.

Sample report page of quick wins, licensing, and next steps. — Quick wins and bigger changes, the licenses each fix needs, and the next steps week by week.

The sample report is for Northwind Legal.

Download the sample report (PDF, 5 pages) →

Questions

Can we install it ourselves?

No. We build the Dexy Trust Scorecard for your organization as part of the project and set it up in your own Microsoft 365. We agree with your IT team which sites are scanned and what access the scan needs, and we run the first scan with you.

Does it change permissions or delete files?

No. The storage view recommends clean-up and never deletes anything. Owners and admins decide what to change, and SharePoint Advanced Management runs any site access review.

Where are the results stored?

In hidden lists on an admin site in your own Microsoft 365. Nothing is hosted by us.

Who can see the scores?

Admins see everything. Site owners see their own site. Everyone else sees only the content they have been asked to review.

Book a scoping call →

Find out how ready your content is for Copilot

We usually reply the same day in business hours. The next step is a short scoping call.

Book a scoping call