// ai & automation
Adding AI integrations into your work environment
Managing the integration of AI connectors with Microsoft 365 environments requires a clear boundary between the efficiency gains and the potential for data leakage or corruption.
Risks of AI integration with M365 and SharePoint
- Data hallucination and accuracyAI may generate confident but factually incorrect responses based on SharePoint data. If used for decision-making or client communication, this can lead to professional liability.
- Permissions "bleed"AI tools often bypass the "security by obscurity" that humans rely on. If a SharePoint site has loose permissions (for example, "Internal Everyone"), the AI will surface sensitive data (payroll, HR files) to users who shouldn't see it but technically have access.
- Data sovereignty and privacyDepending on the connector used, data may be processed outside of your specific M365 geographic region. This can lead to breaches of industry-specific compliance (for example, HIPAA, GDPR, or the Australian Privacy Principles).
- Prompt injectionUnauthorised or malicious prompts can "trick" the AI into bypassing safety filters or revealing restricted information stored within the indexed emails and sites.
- Lack of point-in-time recoveryStandard M365 sync settings are not a substitute for a dedicated backup. If an AI tool is granted "Write" access and erroneously modifies or deletes large batches of files or emails, these changes may sync across the environment instantly.
The backup warning
Critical: Standard Microsoft 365 "Native Protection" is insufficient when deploying AI connectors. AI tools interact with data at scale and speed. In the event of an AI-driven "logic error" resulting in mass data corruption, over-writing of files, or accidental deletion, Microsoft's standard retention policies may not allow for a granular "undo" of the damage.
A third-party, point-in-time backup solution is mandatory to ensure data can be rolled back to a state prior to the AI integration or any specific AI-led incident.
AI Connector Implementation Disclaimer
- Scope of service. TranTech Computers ("the Company") provides the technical bridge between AI services and your Microsoft 365 environment. The Company does not control the logic, accuracy, or output generated by the third-party AI model.
- Data security and permissions. The Client acknowledges that the AI will have access to all data the authenticated user account can "see." It is the Client's responsibility to ensure that SharePoint permissions and folder access levels are strictly audited prior to implementation. The Company is not liable for the disclosure of sensitive information resulting from improper internal permission structures.
- Data integrity and backups. The Client understands that AI interactions can result in automated data modification. The Company strongly advises the use of an independent, third-party backup solution. The Company shall not be held liable for data loss, corruption, or "hallucinated" content produced by the AI connector.
- No guarantee of accuracy. Outputs generated by AI connectors are for informational purposes only. All AI-generated emails, summaries, and file modifications should be reviewed by a human professional.
- Acceptance of risk. By proceeding with this integration, the Client accepts all inherent risks associated with Large Language Models (LLMs) and third-party AI connectors, including potential impacts on data privacy and system stability.
Disclaimer: TranTech accepts no responsibility or liability for risks, operational outcomes, or potential data leakage associated with third-party or integrated AI models. Users interact with AI platforms at their own discretion and risk.
To accept
Download the PDF, sign it and send it back to admin@trantech.com.au, or call us on (07) 4837 1201.
Next steps for implementation
- Audit permissions: run a SharePoint sharing report to see what is currently "Public" or "Organisation-wide".
- Verify backup: ensure your current backup solution (for example, Veeam, Datto or AvePoint) is successfully backing up the specific SharePoint sites and mailboxes being indexed by the AI.