Frequently Asked Questions

Does Controlio change my environment?

No. All access is read-only. No configuration is written to your environment, and no agent is installed.

Do you reach my emails or files?

No. Only configuration and security settings are read. The content of emails, files or messages is never reached. Broad permissions such as Sites.FullControl are not taken.

Why is the Global Reader role requested?

So that Exchange, Teams and Purview configuration can be read app-only. It is read-only and gives no access to content. More detail: Global Reader Role.

Which frameworks is compliance measured against?

CIS Benchmark, NIST, ISO 27001 and Microsoft Security Baseline. Findings are also mapped to MITRE ATT&CK techniques.

Who receives alerts?

The recipients you define, and the Global Administrator and Security Administrator as well. An alert therefore cannot be quietly turned off.

What if I don't lock TrueState?

Your environment becomes visible but is not protected. Protection begins only when you lock the baseline. See TrueState.

How does the trial start?

You request it with your corporate email and click the verification link you receive. The thirty-day period starts on your first sign-in to the app.

I'm a partner. Can I serve under my own brand?

Yes. See White-Label.