Microsoft Copilot
Governance for AI,
not just Microsoft 365.
Copilot, Copilot Studio and SharePoint Agents are covered today. Copilot Cowork, Agent Builder and Agent 365 are on the roadmap, so your controls extend as Microsoft ships.
SharePoint 
Rencore Governance is licensed per Microsoft 365 account 
Rencore licenses are calculated based on assigned Microsoft 365 licenses in your tenant. Only active/enabled users and resources are counted; external users and guests without licenses are not counted.
Professional
Governance Policies & Automation
Includes
-
Policy Monitoring - Governance Automation
- Lifecycle Management
- License Cost Optimization
- Storage Cost Optimization
Modules
- Digital Workplace
Govern the Microsoft 365 collaboration tools Microsoft 365 Users, Groups, Licenses, Usage, Sensitivity Labels etc, Teams, SharePoint, Viva Engage, OneDrive, Exchange, Planner
Premium
Tenant Security & Provisioning
Includes Professional Features +
- Provisioning
- Reviews: permissions
- Reviews: workspaces and access
- Teams App for End Users
- Role-Based Access Control
- Quickstart Onboarding
Modules
- Digital Workplace Govern the Microsoft 365 collaboration tools Microsoft 365 Users, Groups, Licenses, Usage, Sensitivity Labels etc, Teams, SharePoint, Viva Engage, OneDrive, Exchange, Planner
-
Optional paid add-on AI & Agents 
Optional paid modules:
Govern Copilot, Claude Enterprise (preview), ChatGPT Enterprise (preview), Cowork (coming soon), Agent Builder (coming soon), Copilot Studio, SharePoint Agents - Optional paid add-on Apps, Automation & BI
Optional paid modules:
Govern the Power Platform with Power Automate, Power Apps, Power BI, and Fabric
Add-ons
- Optional paid add-on Custom Metadata Optional paid add-on
- Optional paid add-on Files & Folders
Metadata for all SharePoint, OneDrive and Loop files and folders, including permissions, file size and types.
Enterprise
Manage Governance at Scale
Includes Premium Features +
- Custom Metadata
- Files & Folders
- Tenant Segmentation (Virtual Tenants)
- Unlimited Audit Log Retention
- Multi-Geo Tenant Support
- Test/Staging Environment
- Full onboarding included
- Customer Success Manager
- 24/7 Priority Support
Modules
- Digital Workplace Govern the Microsoft 365 collaboration tools Microsoft 365 Users, Groups, Licenses, Usage, Sensitivity Labels etc, Teams, SharePoint, Viva Engage, OneDrive, Exchange, Planner
- Optional paid add-on AI & Agents Optional paid modules:
Govern Copilot, Claude Enterprise (preview), ChatGPT Enterprise (preview), Cowork (coming soon), Agent Builder (coming soon), Copilot Studio, SharePoint Agents - Optional paid add-on Apps, Automation & BI Optional paid modules:
Govern the Power Platform with Power Automate, Power Apps, Power BI, and Fabric
Add-Ons
- Custom Metadata Already included in Enterprise.
- Files & Folders Already included in Enterprise. Metadata for all SharePoint, OneDrive and Loop files and folders, including permissions, file size and types.
- Optional paid add-on Dedicated Isolated Infrastructure Optional paid add-on
Optional paid add-on/module
All Rencore Governance plans include
No global admin required
Deploy and run Rencore Governance without ever granting Microsoft 365 global admin rights, keeping the blast radius small for your security team.
ISO 27001 and 27017 certified, SOC 2 audited, GDPR compliant
Independently audited to the security and privacy standards your compliance team already trusts.
250+ policy and report templates
Start fast with topical dashboards and ready-made templates instead of building governance rules from scratch.
Unlimited support
Every subscription includes unlimited support, so your team is never on its own.
Feature comparison
Rencore Governance collects all meta-data of the connected apps into a centralized inventory to browse details and relationships, to report on and manage the apps. 
Perform actions on the Microsoft 365 data directly from within Rencore Governance without requiring administrator access to the tenant, e.g. deactivating a user, archiving a team, etc. Manage the permissions of users to Teams, Groups, Sites, Flows, Apps etc. directly from Rencore Governance. Use one of the many provided templates or create your custom reports and dashboards to visualize, monitor and share your Microsoft 365 app data. Rencore continuously surfaces what to fix next: policy violations, oversharing, unused licenses and wasted storage, each with a recommended action. Create your governance policies either from scratch or use one of our many customizable templates to continuously track and resolve policy violations. Visually build custom automations that allow you to handle policy violations and governance tasks either fully automatically or by involving the end-users. Automatically manage the lifecycle of your Microsoft 365 resources eg. archiving Teams, removing versions, changing permissions etc. Identify and manage clutter in Microsoft 365 from a central place across all connectors. Identify unused licenses or over-licensed users and wasted storage, report and act on cost reports to realize instant ROI. Identify excessive storage usage, outdated unused data in OneDrive and SharePoint. Note: to analyse on File level, the additional paid add-on "Files & Folders" is required. Report on all guest and external users, where they have access and what is shared with them. Find and control externally shared content and sharing links across SharePoint, OneDrive and Teams. Run permission reviews for Teams, SharePoint sites, Microsoft 365 groups and Viva Engage communities to understand and manage who has access to which resource in your tenant. 
Configure regular reviews for Teams, SharePoint sites, Microsoft 365 groups and Viva Engage communities and delegate them to the workspace owners to make sure only the ones who should retain access to your data. Recertify guest access on a schedule and delegate reviews to resource owners. Provision Teams workspaces, SharePoint sites, Planner boards, Viva Engage communities and Entra security groups from templates you define. Naming, metadata, visibility, owners, channels and apps are set in the template, so every new workspace starts inside the rules IT sets. Apply Patterns and Practices (PnP) provisioning templates to SharePoint sites as part of a request, so the structure, lists, libraries and branding you already maintain as PnP templates are provisioned the same way every time. Build the approval flow of each template with Rencore automations: one or several approvers, in sequence or in parallel, with deadlines and reminders. Approvers decide in the Rencore Teams app. Call external systems during provisioning from the same automation, before or after the workspace is created: notify a channel, open a ticket or register the workspace where your processes expect it. The Rencore Teams App offers your end-users a centralized Workspace directory to easily find workspaces they are members and managed members and file permissions for the workspaces that they own. The Rencore Teams App offers your end-users the ability to request new workspaces in Teams, SharePoint, Viva Engage and Planner based on templates the admin has given them access to. The Template can include custom approval processes and use the full capabilities of the Rencore Automation Engine. The Rencore Teams app allows to trigger access and sharing reviews for Teams, SharePoint sites, Microsoft 365 groups and Viva Engage communities either ad-hoc or on a recurring schedule. The Reviews can be delegated to the end-users who to scale governance with the help of the entire organization. The Rencore Teams app allows end-users to manage approvals that are delegated to them via Rencore automations. 
Add-on Define your own fields on any object Rencore governs, from Teams and SharePoint sites to users, agents and files. Pick the type that fits, including a relation to one of your own custom objects or to any other object, so you can model your own relationships. No code, no parallel store, and every field works as a condition in segments, reports, policies and automation rules. Optional paid add-on Bring your own lookup tables into the inventory: cost centers, project codes, business units, each with its own schema, its own instance list and one property as the unique key. Any object can reference an instance, a Team, a SharePoint site, a user, an agent, instead of copying the value, so tens of thousands of entries stay maintainable. Optional paid add-on Populate values and instances in bulk from CSV, with per-row error reporting and a round-trip export. The import can also run on a schedule against a CSV at a URL, a SharePoint list or a blob URL, with a column-mapping wizard, so any system of record, SAP, an HR system, a CMDB or a data warehouse, can keep your reference data current without manual maintenance. Optional paid add-on Ask for the business context at the moment a workspace is created, per provisioning template, with your own explanation next to each field. For the workspaces that already exist, a custom-properties step in the review flow asks owners only for the values that are still missing. Optional paid add-on Add-on SharePoint Files Metadata for all SharePoint Files and Folders, including permissions, filesize, types etc. Optional paid add-on OneDrive Files Metadata for all OneDrive Files and Folders, including permissions, filesize, types etc. Optional paid add-on Loop Files Govern Loop Files stored in OneDrive and SharePoint, who owns them, who they are shared with. Optional paid add-on Tenant Segmentation gives control to subsidiary and country-specific admins, allowing collaboration to be governed where it matters. Switch between Segments in Rencore Governance and assign admin roles to each segment for optimal collaboration governance and Rencore Governance workspace management. The Rencore Governance Enterprise tier scans and governs multi-geo Microsoft 365 tenants. Provisioning into multi-geo tenants is coming soon. You can request an additional free test environment for staging purposes of your governance use-cases that can be connected to a developer tenant. Microsoft 365 Govern Microsoft 365 Users, Groups, Subscriptions & Apps, Sensitivity labels, Places, App usage and many more Microsoft 365 resources. Teams Govern Teams, Channels, Apps, Owners, Members, Guests, and track MS Teams usage and user activity SharePoint Govern SharePoint Site Collections and Sites, Owners, Members, Lists and Libraries, Groups, Permissions, Shared Files and more Viva Engage Govern Viva Engage Communities, Owners and Members. OneDrive Govern OneDrives, Owners, Collaborators and Shared Files Exchange Govern MS Exchange Mailboxes, Redirect Rules and associated information Planner Govern Planner Plans, who owns and uses them, and declutter Planner. Entra ID Govern Entra ID Enterprise Applications, Devices, App Registrations, Domains, Client Secrets, Risky Sign-ins and much more 
Intune Planned Govern Intune managed devices, compliance policies and configuration profiles. Optional paid add-on Optional paid add-on Add-on Module Copilot Get ready for Copilot in your organization, perform access reviews, apply sensitivity labels, track usage of Copilot, optimize licensing and pay per user costs. Optional paid add-on Optional paid add-on Claude Enterprise Preview Govern Claude Enterprise: users joined to their Microsoft 365 identity, projects, Claude Code and Cowork sessions, activity, and token spend per user and department. Metadata only, no conversation content. Optional paid add-on Optional paid add-on ChatGPT Enterprise Preview Govern ChatGPT Enterprise: custom GPTs, projects and workspace agents with who they are shared with, joined to Microsoft 365 identity, plus Codex activity and spend. Metadata only, no conversation content. Optional paid add-on Optional paid add-on Copilot Cowork Coming soon Govern Microsoft 365 Copilot Cowork: track how it is used, manage access and optimise licensing costs. Optional paid add-on Optional paid add-on Agent Builder Coming soon Identify, catalogue and govern the agents your users build with Microsoft Copilot Agent Builder. Optional paid add-on Optional paid add-on Copilot Studio Govern your Copilot Agents, which knowledge and topics they rely on, how they are used, who has access to them and how much they cost. Optional paid add-on Optional paid add-on SharePoint Agents Identify, catalogue and manage SharePoint Agents Optional paid add-on Optional paid add-on Agent 365 Coming soon Govern the AI agents in Microsoft Agent 365: track how they are used, who has access, and manage their lifecycle. Optional paid add-on Optional paid add-on 
Microsoft Foundry Preview Govern LLMs, how they are used and who has access to them. Optional paid add-on Optional paid add-on Azure Govern Azure Resource Groups used to provide AI in Foundry and Copilot Studio
Optional paid add-on Optional paid add-on Add-on Module Power Platform Manage Power Platform environments, including the users who have access. Optional paid add-on Optional paid add-on Power Automate Govern Power Automate Environments, Flows, Triggers, Actions, Connections, Runs, Owners and Users Optional paid add-on Optional paid add-on Optional paid add-on Optional paid add-on Power BI Govern MS Fabric & Power BI Workspaces, Dashboards, Reports, Datasets, Datamarts, Dataflows, Pipelines, Capacities, Apps and Activity Events Optional paid add-on Optional paid add-on Fabric Govern MS Fabric & Power BI Workspaces, Dashboards, Reports, Datasets, Datamarts, Dataflows, Pipelines, Capacities, Apps and Activity Events Optional paid add-on Optional paid add-on 
Dataverse Planned Govern Dataverse environments, tables and the data policies applied to them. Optional paid add-on Optional paid add-on Sign in with your Microsoft 365 account, which optionally can be also from a different tenant than the one you are governing (e.g for MSPs) Granular access management of data and functionality in Rencore Governance Create custom access roles and teams based on your own needs. Rencore is regularly externally penetration tested on top of our own automated penetration testing during development and operation. All information in Rencore is encrypted. Azure Storage Accounts have built-in support for encryption at rest and in transit. Our documentation provides more details. Customer data is segregated and encrypted per customer in the data storage to make data spillage impossible by design. Rencore operates in full compliance with GDPR. Rencore Governance has a SOC 2 Type II report, audited every year. Rencore GmbH is certified to ISO 27001:2022 for its information security management system. Rencore GmbH is certified to ISO 27017, which adds the security controls for cloud services. Retain audit logs of Rencore Governance for 1 year Retain the Rencore Governance audit log with no time limit on the Enterprise plan. Rencore Governance is operated as a SaaS in multiple Azure data centers. More locations will be added in the future based on customer demand. As an MSP, you can manage multiple customer tenants with differing plans without having to switch accounts. 
Add-On The optional dedicated isolated infrastructure enables customers and MSPs operating in highly regulated industries (e.g, public sector, financial services, etc.) to run the entire Rencore Governance platform in a fully isolated Azure environment hosted by Rencore.
Optional paid add-on All our customers enjoy our outstanding customer support. Enterprise plan customers benefit from privileged priority support. Premium and Enterprise customers get a guided quickstart to configure their first governance use cases. Enterprise customers with more than 1,000 licensed users on an annual contract receive full guided onboarding. Your customer success manager will support you to get the maximum value out of your Rencore Governance subscription * Professional and Premium require a minimum of 100 users.
Audited, certified, and ready for regulated industries
Independent, EU-sovereign oversight that makes Microsoft’s own controls trustworthy at any scale.
-
Software built in the EU
Engineered in Germany to the highest standards. Independent, EU-sovereign governance with no lock-in.
-
Built for GDPR compliance
Data handling, processing, and storage meet GDPR requirements, so your privacy and legal teams can sign off without a special exception.
-
Certified to the highest security standards
ISO 27001:2022 and ISO 27017, plus a SOC 2 Type 2 report, so your security team can validate Rencore against the frameworks it already trusts.
-
Runs securely in Microsoft Azure
A long-standing Microsoft partner, hosted on Microsoft Azure (Azure CIS, PCI DSS, SOC TSP, ISO 27001) and complementing Microsoft Purview, Entra, and Defender.
The return on investment
-
157%
Return on investment in the first year, from optimized license and storage usage and fewer manual governance hours.
-
50%
Faster Microsoft 365 service adoption, from faster roll-out and adoption monitoring.
-
62%
Lower data leakage and oversharing risk, from regular access reviews and automated data lifecycle management.
Frequently Asked Questions
Can I try Rencore Governance for free?
Yes! You can try the full functionality of Rencore Governance for free for 14 days. Just sign up for a trial and get started with demo data in 3 minutes. You can also connect your own tenant and work with live data once it has been gathered.
What counts as a Microsoft user?
Every user in the connected Microsoft 365 tenant needs to be licensed for Rencore Governance if all of the following conditions are met:
- The user is active/enabled
- The user has a Microsoft 365 license assigned
Note: If any of the conditions above are not met, the user is not counted. External users and guests without a license are not counted as users.
Are there additional infrastructure and service cost?
No, the SaaS version of Rencore Governance includes the service fee, infrastructure, updates, support, and onboarding to give you full cost transparency.
Is the maximum size of the Microsoft 365 tenant limited?
No, Rencore Governance can scan any-sized Microsoft 365 tenant.
Because Rencore is bound to the API limits imposed by Microsoft, scanning of all services takes longer the larger the tenant gets. By configuring which data to be retrieved and the frequency the data should be updated, you can balance this to your individual needs.
Is Rencore secure?
Yes! Rencore Governance was built from the start with the highest security standards in mind to comply with the requirements of our enterprise and government customers around the world.
Rencore is SOC2 Type 2 accredited, fully GDPR, ISO 27001- and ISO 27017-compliant, and continuously monitored and audited.
Infrastructure:
The Rencore Governance infrastructure is hosted on Microsoft Azure and passes all regulatory compliance checks and security controls (Azure CIS 1.1.0, PCI DSS 3.2.1, SOC TSP, ISO 27001).
Database:
Rencore Governance stores data in Azure Storage Accounts and PostgreSQL, both with built-in encryption, firewalls and restricted network access. Your data is hosted in the Microsoft Azure region you choose: Germany (EU), Switzerland, the US or Australia.
Encryption:
All information is encrypted. Azure Storage Accounts and PostgreSQL provide built-in encryption at rest and in transit. All transmissions from the application to the end-user are SSL-encrypted. All keys are securely stored in Azure Key Vault.
Application:
The application is automatically tested against OWASP issues, ensuring resilience against those threats. The codebase is automatically scanned with vulnerability scanners and security analyzers during the build.
Authentication:
Rencore Governance uses Azure AD applications. Customers consent to these AAD apps granting the Rencore Platform access to the data required for analysis and monitoring. Customers can revoke the App-Only or Delegated permissions granted to our applications at any point. Rencore never asks for or stores any usernames or passwords.
Rencore does not require Global Administrator Permissions in Microsoft 365.
Detailed security information about the components and the measures we take to ensure the safety of our customers’ data is available in our online documentation.
For specific questions and audit reports, please reach out to our team.
Does Rencore support multi-geo tenants?
Yes, on the Enterprise plan. Rencore Governance scans and governs multi-geo Microsoft 365 tenants, whose data is stored in more than one geographic region. Organizations with a presence in several regions manage their governance, compliance and security policies across every geographic location of the tenant.
Coming soon: Rencore Governance will allow you to provision into dedicated multi-geo tenants.
Does Rencore support GCC & GCC High?
Talk to us about your GCC or GCC High requirements and we will walk you through the options for your environment. Microsoft 365 service and feature limitations in GCC and GCC High also apply to Rencore Governance.
Rencore Governance as a SaaS is only available in the public cloud.
As MSP can I manage multiple tenants?
Yes, Rencore Governance is multi-tenant capable and separates tenant connection from user authentication to give you maximum flexibility.
You can also export/import configuration from one environment to another to streamline your governance practice.
Are there any maintenance or onboarding fees?
No, for the Rencore-hosted plans (SaaS), there are no maintenance fees. Onboarding is included for annual subscriptions with 1.000 users and more.
Unlimited support and software updates are included with your subscription.
What new Rencore Governance Features and Connectors can I expect?
Please take a look at our Rencore Governance product roadmap to get a better understanding of what we are working on.