Frequently Asked Questions

Frequently Asked Questions

General

What is Contract Risk Scanner for Microsoft 365?

A Microsoft 365 Copilot agent that analyzes contracts and produces structured risk assessments to help procurement, legal, and business teams decide whether to sign, negotiate, or escalate.

No. Contract Risk Scanner for Microsoft 365 is an issue-spotting and review-preparation tool. It does not provide legal advice. Always consult qualified legal counsel before signing any contract.

Who is this for?

  • Procurement teams
  • Legal operations
  • Vendor management
  • IT and security review teams
  • Business leaders making vendor decisions

Do I need a Microsoft 365 Copilot license?

No, but it helps.

  • With Copilot license: Agent can read documents from your OneDrive/SharePoint directly
  • Without Copilot license: You upload contracts as files into the chat

Both work fully.

Privacy and Security

Does my data leave my Microsoft 365 tenant?

Not by default. Contract Risk Scanner for Microsoft 365 has no backend service. All processing happens inside your tenant via Microsoft 365 Copilot.

However, if your tenant administrator has enabled third-party models (e.g., Claude via Azure AI), Copilot may route processing through those models, which could involve infrastructure outside your tenant boundary. This is controlled entirely by your tenant administrators — the agent respects all tenant-level model and data controls.

📖 Read more: Security and Privacy

Is my data used to train AI models?

No. Microsoft 365 Copilot does not train its foundation models on your data, and Contract Risk Scanner for Microsoft 365 adds no additional data uses.

Where are outputs stored?

Wherever you choose to save them. There is no Contract Risk Scanner database. Common destinations:

  • Your OneDrive
  • A SharePoint library
  • A Power BI workspace or data pipeline
  • Your own CLM system

Is the agent SOC 2 / ISO 27001 compliant?

The agent inherits Microsoft 365’s compliance posture, which includes SOC 2 Type II and ISO 27001, among others.

📖 Read more: Security and Privacy

Usage

What file formats does it support?

  • ✅ .docx (Word) - preferred
  • ✅ .pdf (text-based)
  • ✅ Pasted text
  • ✅ SharePoint URLs (with Copilot license)
  • ❌ Scanned-image PDFs
  • ❌ Encrypted documents

How long does a scan take?

  • Quick Scan: ~30 seconds
  • Negotiation Prep: 1–3 minutes (depending on contract length)
  • Vendor Risk Review: 1–2 minutes
  • Contract Comparison: 2–4 minutes

Can it review contracts in languages other than English?

The agent will attempt non-English contracts but accuracy varies. It will warn you when it detects a non-English document.

Can I scan multiple contracts at once?

Run them one at a time for best results.

What’s the maximum contract length?

There’s no strict limit, but contracts over ~100 pages may require multiple passes. Most commercial contracts are well within range.

Custom Risk Registers

Can I customize what the agent looks for?

Yes. You can upload your own risk_rules_config.json file to define custom required clauses, unacceptable terms, preferred language, scoring weights, and thresholds.

📖 Read more: Custom Risk Registers

What happens if I don’t upload a custom risk register?

The agent uses its built-in risk rules, which cover standard commercial contract risks across areas like liability, indemnification, termination, data handling, and more.

Output

What do I do with the CSV output?

Use it for portfolio analysis in Power BI, your CLM, or internal analytics workflows.

📖 Read more: Exporting Results

What’s the JSON output for?

Custom integrations:

  • Power Automate flows
  • Power BI dashboards
  • Internal CLM systems
  • Custom analytics

📖 Read more: Exporting Results

Can I trust the risk score?

The score is deterministic and explainable - every score comes with its breakdown so you can see what drove it.

But: it’s still a tool. Human judgment is always required, especially for high-stakes contracts.

What does “Confidence” mean in the risk register?

How confident the agent is that a finding is real:

  • High: Clear pattern match in contract text
  • Medium: Likely but context-dependent
  • Low: Possible - verify before acting

Always review Low-confidence findings yourself.

Technical

How is the agent updated?

Updates are published through the Microsoft Marketplace. We publish release notes on our documentation site for each version.

Can I integrate with my CLM (Ironclad, Icertis, etc.)?

Use the JSON export to feed data into your CLM via Power Automate or your own integration layer. The JSON schema is stable and documented.

📖 Read more: Exporting Results

Still have questions?

✉️ Email support@videotec.io