Governance for AI,
not just Microsoft 365.
Copilot, Copilot Studio, SharePoint Agents and Microsoft Foundry are covered today. Copilot Cowork, Agent Builder and Agent 365 are on the roadmap, so your controls extend as Microsoft ships.
SharePoint 
Rencore Governance is licensed per Microsoft 365 account 
Rencore licenses are calculated based on assigned Microsoft 365 licenses in your tenant. Only active/enabled users and resources are counted; external users and guests without licenses are not counted.
Professional
Governance Policies & Automation
Includes
-
Policy Monitoring - Governance Automation
- Lifecycle Management
- License Cost Optimization
- Storage Cost Optimization
Modules
- Digital Workplace
Premium
Tenant Security & Provisioning
Includes Professional Features +
- Provisioning
- Permission Reports
- Workspace & Access Reviews
- Teams App for End Users
- Role-Based Access Control
- Quickstart Onboarding
Modules
- Digital Workplace
-
Apps, Automation & BI 
- AI & Agents
Add-ons
- Files & Folders
Enterprise
Manage Governance at Scale
Includes Premium Features +
- All Files & Folders
- Tenant Segmentation (Virtual Tenants)
- Unlimited Audit Log Retention
- Multi-Geo Tenant Support
- Test/Staging Environment
- Full onboarding included
- Customer Success Manager
- 24/7 Priority Support
Modules
- Digital Workplace
- Apps, Automation & BI
- AI & Agents
Add-Ons
- Files & Folders
- Dedicated Isolated Infrastructure
- Self-hosting in Customer Infrastructure
Optional paid add-on/module
All Rencore Governance plans include
No global admin required
Deploy and run Rencore Governance without ever granting Microsoft 365 global admin rights, keeping the blast radius small for your security team.
SOC 2, GDPR, ISO 27001 and ISO 27017 certified
Independently audited to the security and privacy standards your compliance team already trusts.
250+ policy and report templates
Start fast with topical dashboards and ready-made templates instead of building governance rules from scratch.
Unlimited support
Every subscription includes unlimited support, so your team is never on its own.
Feature comparison
Rencore Governance collects all meta-data of the connected apps into a centralized inventory to browse details and relationships, to report on and manage the apps. 
Perform actions on the Microsoft 365 data directly from within Rencore Governance without requiring administrator access to the tenant, e.g. deactivating a user, archiving a team, etc. Use one of the many provided templates or create your custom reports and dashboards to visualize, monitor and share your Microsoft 365 app data. Rencore continuously surfaces what to fix next: policy violations, oversharing, unused licenses and wasted storage, each with a recommended action. Create your governance policies either from scratch or use one of our many customizable templates to continuously track and resolve policy violations. Visually build custom automations that allow you to handle policy violations and governance tasks either fully automatically or by involving the end-users. Automatically manage the lifecycle of your Microsoft 365 resources eg. archiving Teams, removing versions, changing permissions etc. Identify unused licenses or over-licensed users and wasted storage, report and act on cost reports to realize instant ROI. Identify excessive storage usage, outdated unused data in OneDrive and SharePoint. Note: to analyse on File level, the additional paid add-on "Files & Folders" is required. Report on all guest and external users, where they have access and what is shared with them. Find and control externally shared content and sharing links across SharePoint, OneDrive and Teams. Recertify guest access on a schedule and delegate reviews to resource owners. 
Manage the permissions of users to Teams, Groups, Sites, Flows, Apps etc. directly from Rencore Governance. Create permission reports for Users, Sites, OneDrives Teams, Flows, Apps and more to understand and manage who has access to which resource in your tenant. Configure regular reviews for Teams, Sites, Flows, Apps, their included content and metadata and delegate them to the resource owners to make sure only the ones who should retain access to your data. Provision custom Teams, SharePoint and Viva Engage templates and flexible approval processes and provide them to your end-users via the Rencore Nova Teams App. The Rencore Teams App offers your end-users a centralized Workspace directory to easily find workspaces they are members and managed members and file permissions for the workspaces that they own. The Rencore Teams App offers your end-users the ability to request new workspaces in Teams, SharePoint, Viva Engage and Planner based on templates the admin has given them access to. The Template can include custom approval processes and use the full capabilities of the Rencore Automation Engine. The Rencore Teams app allows to trigger access and sharing reviews for Teams, SharePoint Sites and files, Power Apps, Flows etc. either ad-hoc or on a recurring schedule. The Reviews can be delegated to the end-users who to scale governance with the help of the entire organization. The Rencore Teams app allows end-users to manage approvals that are delegated to them via Rencore automations. Tenant Segmentation gives control to subsidiary and country-specific admins, allowing collaboration to be governed where it matters. Switch between Segments in Rencore Governance and assign admin roles to each segment for optimal collaboration governance and Rencore Governance workspace management. The Rencore Governance Enterprise tier supports multi-geo Microsoft 365 tenants for provisioning and governance use cases. You can request an additional free test environment for staging purposes of your governance use-cases that can be connected to a developer tenant. 
Add-on SharePoint Files Metadata for all SharePoint Files and Folders, including permissions, filesize, types etc. Optional paid add-on OneDrive Files Metadata for all OneDrive Files and Folders, including permissions, filesize, types etc. Optional paid add-on Loop Files Govern Loop Files stored in OneDrive and SharePoint, who owns them, who they are shared with. Optional paid add-on Microsoft 365 Govern Microsoft 365 Users, Groups, Subscriptions & Apps, Sensitivity labels, Places, App usage and many more Microsoft 365 resources. Teams Govern Teams, Channels, Apps, Owners, Members, Guests, and track MS Teams usage and user activity SharePoint Govern SharePoint Site Collections and Sites, Owners, Members, Lists and Libraries, Groups, Permissions, Shared Files and more Viva Engage Govern Viva Engage Communities, Owners and Members. OneDrive Govern OneDrives, Owners, Collaborators and Shared Files Exchange Govern MS Exchange Mailboxes, Redirect Rules and associated information Planner Govern Planner Plans, who owns and uses them, and declutter Planner. Entra ID Govern Entra ID Enterprise Applications, Devices, App Registrations, Domains, Client Secrets, Risky Sign-ins and much more Intune Coming soon Govern Intune managed devices, compliance policies and configuration profiles. Optional paid add-on Optional paid add-on Add-on Module Power Platform Manage Power Platform environments, including the users who have access. Optional paid add-on Optional paid add-on Power Automate Govern Power Automate Environments, Flows, Triggers, Actions, Connections, Runs, Owners and Users Optional paid add-on Optional paid add-on Optional paid add-on Optional paid add-on Power BI Govern MS Fabric & Power BI Workspaces, Dashboards, Reports, Datasets, Datamarts, Dataflows, Pipelines, Capacities, Apps and Activity Events Optional paid add-on Optional paid add-on Fabric Govern MS Fabric & Power BI Workspaces, Dashboards, Reports, Datasets, Datamarts, Dataflows, Pipelines, Capacities, Apps and Activity Events Optional paid add-on Optional paid add-on Dataverse Coming soon Govern Dataverse environments, tables and the data policies applied to them. Optional paid add-on Optional paid add-on Add-on Module Copilot Get ready for Copilot in your organization, perform access reviews, apply sensitivity labels, track usage of Copilot, optimize licensing and pay per user costs. Optional paid add-on Optional paid add-on Copilot Cowork Coming soon Govern Microsoft 365 Copilot Cowork: track how it is used, manage access and optimise licensing costs. Optional paid add-on Optional paid add-on Agent Builder Coming soon Identify, catalogue and govern the agents your users build with Microsoft Copilot Agent Builder. Optional paid add-on Optional paid add-on Copilot Studio Govern your Copilot Agents, which knowledge and topics they rely on, how they are used, who has access to them and how much they cost. Optional paid add-on Optional paid add-on SharePoint Agents Identify, catalogue and manage SharePoint Agents Optional paid add-on Optional paid add-on Agent 365 Coming soon Govern the AI agents in Microsoft Agent 365: track how they are used, who has access, and manage their lifecycle. Optional paid add-on Optional paid add-on Microsoft Foundry Govern LLMs, how they are used and who has access to them. Optional paid add-on Optional paid add-on Azure Govern Azure Resource Groups used to provide AI in Foundry and Copilot Studio
Optional paid add-on Optional paid add-on Sign in with your Microsoft 365 account, which optionally can be also from a different tenant than the one you are governing (e.g for MSPs) Granular access management of data and functionality in Rencore Governance Create custom access roles and teams based on your own needs. Rencore is regularly externally penetration tested on top of our own automated penetration testing during development and operation. All information in Rencore is encrypted. Azure Storage Accounts have built-in support for encryption at rest and in transit. Our documentation provides more details. Customer data is segregated and encrypted per customer in the data storage to make data spillage impossible by design. Rencore operates in full compliance with GDPR. Rencore is accredited SOC 2 Type II compliance and annually audited. Rencore is accredited SOC 2 Type II compliance and annually audited. Rencore is accredited SOC 2 Type II compliance and annually audited. Retain audit logs of Rencore Governance for 1 year Retain the Rencore Governance audit log with no time limit on the Enterprise plan. Rencore Governance is operated as a SaaS in multiple Azure data centers. More locations will be added in the future based on customer demand. As an MSP, you can manage multiple customer tenants with differing plans without having to switch accounts. 
Add-On The optional dedicated isolated infrastructure enables customers and MSPs operating in highly regulated industries (e.g, public sector, financial services, etc.) to run the entire Rencore Governance platform in a fully isolated Azure environment, either hosted by Rencore or self-hosted.
Optional paid add-on Add-On The optional self-hosting add-on enables customers in highly regulated industries (e.g, public sector, financial services, defense etc.) to run the entire Rencore Governance platform in in a fully isolated infrastructure self-hosted and maintained by the customer.
Optional paid add-on All our customers enjoy our outstanding customer support. Enterprise plan customers benefit from privileged priority support. Premium and Enterprise customers get a guided quickstart to configure their first governance use cases. Enterprise customers with more than 1,000 licensed users on an annual contract receive full guided onboarding. Your customer success manager will support you to get the maximum value out of your Rencore Governance subscription * Professional and Premium require a minimum of 100 users.
Audited, certified, and built for regulated enterprises
Independent, EU-sovereign oversight that makes Microsoft’s own controls trustworthy at enterprise scale.
-
Software built in the EU
Engineered in Germany to the highest standards. Independent, EU-sovereign governance with no lock-in.
-
Built for GDPR compliance
Data handling, processing, and storage meet GDPR requirements, so your privacy and legal teams can sign off without a special exception.
-
Certified to the highest security standards
SOC 2 Type 2, ISO 27001:2022, and ISO 27017, so your security team can validate Rencore against the frameworks it already trusts.
-
Runs securely in Microsoft Azure
A long-standing Microsoft partner, hosted on Microsoft Azure (Azure CIS, PCI DSS, SOC TSP, ISO 27001) and complementing Microsoft Purview, Entra, and Defender.
The return on investment
-
157%
Return on investment in the first year, from optimized license and storage usage and fewer manual governance hours.
-
50%
Faster Microsoft 365 service adoption, from faster roll-out and adoption monitoring.
-
62%
Lower data leakage and oversharing risk, from regular access reviews and automated data lifecycle management.
Frequently Asked Questions
Can I try Rencore Governance for free?
Yes! You can try the full functionality of Rencore Governance for free for 14 days. Just sign up for a trial and get started with demo data in 3 minutes. You can also connect your own tenant and work with live data once it has been gathered.
What counts as a Microsoft user?
Every user in the connected Microsoft 365 tenant needs to be licensed for Rencore Governance if all of the following conditions are met:
- The user is active/enabled
- The user has a Microsoft 365 license assigned
Note: If any of the conditions above are not met, the user is not counted. External users and guests without a license are not counted as users.
Are there additional infrastructure and service cost?
No, the SaaS version of Rencore Governance includes the service fee, infrastructure, updates, support, and onboarding to give you full cost transparency.
For self-hosting Rencore in your own Azure subscription, an additional annual service fee is applied. Also, the infrastructure costs are not included and depend on how you set up and scale it.
Is the maximum size of the Microsoft 365 tenant limited?
No, Rencore Governance can scan any-sized Microsoft 365 tenant.
Because Rencore is bound to the API limits imposed by Microsoft, scanning of all services takes longer the larger the tenant gets. By configuring which data to be retrieved and the frequency the data should be updated, you can balance this to your individual needs.
Is Rencore secure?
Yes! Rencore Governance was built from the start with the highest security standards in mind to comply with the requirements of our enterprise and government customers around the world.
Rencore is SOC2 Type 2 accredited, fully GDPR, ISO 27001- and ISO 27017-compliant, and continuously monitored and audited.
Infrastructure:
The Rencore Governance infrastructure is hosted on Microsoft Azure and passes all regulatory compliance checks and security controls (Azure CIS 1.1.0, PCI DSS 3.2.1, SOC TSP, ISO 27001).
Database:
Rencore Governance utilizes a NoSQL database and has no inherent risk of injection attacks associated with SQL-type databases. Your data can be hosted in any available Microsoft Azure datacenter.
Encryption:
All information is encrypted. Azure Storage Accounts provide built-in support for encryption at rest and in transit. In addition, we add another layer of AES-256-bit industry-standard encryption around the data before it is transmitted to storage. All transmissions from the application to the end-user are SSL-encrypted. All keys are securely stored in Azure Key Vault.
Application:
The application is automatically tested against OWASP issues, ensuring resilience against those threats. The codebase is automatically scanned with vulnerability scanners and security analyzers during the build.
Authentication:
Rencore Governance uses Azure AD applications. Customers consent to these AAD apps granting the Rencore Platform access to the data required for analysis and monitoring. Customers can revoke the App-Only or Delegated permissions granted to our applications at any point. Rencore never asks for or stores any usernames or passwords.
Rencore does not require Global Administrator Permissions in Microsoft 365.
Detailed security information about the components and the measures we take to ensure the safety of our customers’ data is available in our online documentation.
For specific questions and audit reports, please reach out to our team.
Does Rencore support multi-geo tenants?
Yes, Rencore supports multi-geo tenants. The Rencore Governance solution is designed to handle the complex requirements of multi-geo Microsoft 365 environments. This enables organizations with a presence in different geographical regions to effectively manage their governance, compliance, and security policies across multiple Microsoft 365 tenants.
By supporting multi-geo tenants, customers can deploy Rencore solutions in different data centers around the world to comply with local data protection regulations and optimize performance.
Coming soon: Rencore Governance will allow you to provision into dedicated multi-geo tenants.
Does Rencore support GCC & GCC High?
Yes, Rencore Governance can be self-hosted in your own Azure subscription in GCC and GCC High. Microsoft 365 service and feature limitations in GCC and GCC High also apply to Rencore Governance.
Rencore Governance as a SaaS is only available in the public cloud.
As MSP can I manage multiple tenants?
Yes, Rencore Governance is multi-tenant capable and separates tenant connection from user authentication to give you maximum flexibility.
You can also export/import configuration from one environment to another to streamline your governance practice.
Are there any maintenance or onboarding fees?
No, for the Rencore-hosted plans (SaaS), there are no maintenance fees. Onboarding is included for annual subscriptions with 1.000 users and more.
Unlimited support and software updates are included with your subscription.
What new Rencore Governance Features and Services can I expect?
Please take a look at our Rencore Governance product roadmap to get a better understanding of what we are working on.
