Microsoft-native evidence was readable and can be linked to a control check.
Tesrex Copilot Assurance
Free, self-hosted Copilot governance evidence starter kit.
Tesrex Copilot Assurance helps Microsoft 365 teams see which Microsoft-native controls are visible, incomplete, inaccessible or waiting on manual evidence before Copilot becomes harder to govern.
MIT licensedlocal demo modesynthetic sample outputread-only first tenant path
It packages readiness evidence. It does not certify the tenant.
Use the starter kit as a local evidence aid for review. Do not treat the report as certification, legal or compliance advice, a hosted service or an enforcement layer.
- Not a managed service
- Not audit certification
- Not legal or compliance advice
- Not a Copilot replacement
- Not an enforcement layer
- Not a hosted compliance service
Make Copilot governance evidence readable.
Microsoft 365 Copilot readiness depends on evidence that is usually spread across Microsoft Purview, Graph, SharePoint, Audit, licensing, eDiscovery and admin controls. The starter kit gives teams a local report structure that separates what was seen from what still needs proof.
Some evidence exists, but scope, permissions, age or source coverage limits the result.
The run records a permission or access gap instead of hiding it.
A Purview export, admin screenshot or customer artifact may be needed before a stronger result is possible.
Report status model
PASSEvidence is sufficient for this starter-kit control check.
WARNAttention is needed, but this is not automatically a tenant failure.
UNKNOWNThe run did not collect enough evidence to classify the control.
NOT_ACCESSIBLEThe assessment identity could not read the needed source.
NOT_LICENSEDAvailable evidence indicates the relevant capability or licence is not present.
FAILCollected evidence indicates a control gap.
Run the demo before giving it tenant access.
The public quick start uses synthetic example evidence. It does not connect to Microsoft 365, does not read tenant data and does not create customer evidence.
When tenant-connected mode is used later, the posture stays read-only first with explicit permission, licensing and evidence boundaries.
Local quick start
git clone <GitHub starter-kit URL>cd tesrex-copilot-assurancejust checkjust demojust serveGenerated reports stay under ignored local artifacts. They are not public website links.
Built as a community-maintained evidence aid.
The useful contribution is narrow and source-backed: clearer setup, better report readability, tests and Microsoft ecosystem change reports that maintainers can review.
No hidden telemetry. No automatic remediation. No support SLA. No source-less mapping changes.
Fix instructions, troubleshooting, local run steps and first-minute clarity.
Improve the report UI, JSON fixtures, status wording and evidence-pack readability.
Raise source-backed changes when Microsoft API, UI, label or control behaviour moves.
Where Tesrex fits around the starter kit.
The starter kit is free and self-hosted. Tesrex can still help when the evidence raises practical questions: which controls matter first, what is blocked by permissions or licensing, which Microsoft-native evidence should be gathered next, and how governance turns into a reviewable rollout plan.
Optional Tesrex help
- Interpret the evidence pack with accountable owners.
- Map Copilot governance gaps into a practical remediation route.
- Connect permissions, Purview, SharePoint, Audit, eDiscovery and user trust into one workpack.
- Keep AI experience improvement tied to evidence and human review.
Use the starter kit first. Talk to us when the evidence needs a plan.
Open the GitHub starter kit, inspect the synthetic sample and run the local demo. If the evidence raises governance or rollout questions, Tesrex can help turn that into a practical workpack.