CoreView launches SharePoint tool to curb AI data risks

CoreView has launched Control for SharePoint, a product aimed at access risks tied to AI use in Microsoft 365 environments.

The add-on gives organisations visibility into SharePoint permissions at file, folder and item level, with risk ranking, remediation tools and audit records. It is intended to help IT teams identify and address oversharing in large SharePoint estates, where permissions can build up over time across large numbers of sites and documents.

Research cited by CoreView points to growing concern among IT leaders about how AI tools may expose data that was already available but not properly understood. According to the company, 68% of IT leaders identify anonymous sharing links as a security risk, while 76% worry that AI will surface confidential files their teams did not know were exposed.

That concern reflects a broader shift in how companies assess information access. As businesses add AI assistants and search tools to workplace software, long-standing weaknesses in document permissions can become more visible because these systems can discover and present material more quickly than before.

SharePoint estates in large organisations can contain hundreds of millions of files and folders, each with separate or inherited permissions. Non-inherited permissions, external sharing links and direct access grants can accumulate over years, making it difficult for central IT teams to track who can view what across thousands of sites.

CoreView says the product is designed to move this work beyond manual checks, scripts and spreadsheet exports. It allows remediation tasks to be assigned to site owners, who can review permissions, revoke access and address oversharing without routing every action through a central IT function.

Each access review decision and remediation step is recorded, creating an auditable trail that can be exported when needed. The system also provides an ongoing view of access changes rather than a single point-in-time report.

Customer view

Two users cited by CoreView said the software reduces the work needed to identify and investigate access issues.

"CoreView's new Control for SharePoint puts everything in one place. The filtering and drill-down capabilities help quickly identify areas that need attention, and the ability to link to related reports makes it easy to gather deeper insights and take action," said Tina Boutin, Microsoft 365 architect, Goodwill Northern New England.

Another customer pointed to the time previously required to collect permission data.

"CoreView Control for SharePoint gives us at-a-glance data that previously required significant time and effort to collect and analyse," said Neil Fleck, manager of email security and cloud services, Middleby.

AI pressure

The launch highlights a practical challenge for companies introducing AI into workplace systems while maintaining control over existing data. In many cases, the issue is not that AI creates new access rights, but that it reveals the consequences of old permission settings that were poorly documented or rarely reviewed.

Andrea Sivieri, chief product and technology officer at CoreView, said organisations are rethinking access management as AI use grows.

"AI is changing the way organisations think about SharePoint permissions. Many are discovering they have far less visibility into SharePoint access than they realised, particularly at file and folder level. In large environments, permissions accumulate over years across millions of items. Understanding the extent of that exposure has become a prerequisite for deploying AI with confidence," Sivieri said.

Control for SharePoint is being sold as an add-on to CoreView's broader platform for Microsoft 365 administration and resilience. The release follows other product additions focused on AI administration, tenant resilience and tenant management in Microsoft 365 environments.

CoreView says it works with more than 4,000 organisations managing complex Microsoft 365 estates, including large multi-tenant and hybrid environments.