Terms of Service

Last updated: 2 July 2026 (rev 11) · M365Clarity (sole trader)

1. Acceptance

By creating an account or using M365Clarity you agree to these Terms. If you do not agree, do not use the service.

2. The service

M365Clarity is a Microsoft 365 feature and configuration intelligence platform. It connects to your M365 tenant via read-only Microsoft Graph API access to check feature configuration status and provide AI-powered guidance.

We reserve the right to modify or discontinue the service (or any part of it) at any time with reasonable notice.

3. Your account

You are responsible for maintaining the security of your account. You must notify us immediately of any unauthorised use. You must not share your account or allow others to use it on your behalf (except for Multi-Tenant plan users managing client tenants).

You must be 18 or over and have the authority to connect your organisation's Microsoft 365 tenant to M365Clarity. By connecting a tenant you warrant that you have the necessary permissions to authorise read-only Graph API access.

4. Acceptable use

You must not:

5. Subscription and billing

Free plan access is provided indefinitely at no charge. Paid plans are billed monthly in advance via Stripe:

Prices are exclusive of VAT where applicable. All subscriptions are billed on a rolling monthly basis with no minimum term.

Cancellation

You may cancel your subscription at any time via Account → Manage Billing. Cancellation takes effect at the end of the current billing period. You retain full access to your paid tier until that date.

Refund policy

All payments are non-refundable. We do not offer refunds or credits for partial months, unused periods, or downgrades. If you cancel part-way through a billing period, you will not be charged again but no refund will be issued for the remaining days.

This policy does not affect any statutory rights you may have under UK consumer law.

Payment failures

If payment fails, Stripe will retry automatically on a short schedule. After repeated failed attempts, your account will be downgraded to the Free plan until a valid payment method is provided. Your scan history and tenant connections are retained during any downgrade.

6. AI features

AI-generated content (Priority Actions, Compliance Mapping, Executive Summary, Executive Briefing PDF, Conversational Remediation, Predictive Risk Alerts, Deprecated Feature Impact Summaries, What If, Adoption Coach, Change Management analysis, Copilot Readiness, Proactive Insights, Return Summary, Guest Audit observations, Licence Cost Estimates, Licence Waste Detection reports, Cyber Essentials Readiness reports, SLA assessments, and Cross-Tenant Digest emails) is provided for informational purposes only. It does not constitute legal, security, compliance, or financial advice. You should verify AI recommendations and cost estimates with qualified professionals before implementing them.

6a. What If feature

The What If feature allows you to ask questions about your Microsoft 365 tenant configuration and receive AI-generated analysis of the potential impact of configuration changes. This analysis is based solely on the scan data M365Clarity has collected from your tenant at the time of the most recent scan. It describes the potential impact on configuration check statuses and compliance framework alignment only.

What If responses do not constitute security advice, IT advice, professional advice of any kind, or a recommendation to make or not make any configuration change. The feature is informational only. M365Clarity Limited accepts no liability whatsoever for any configuration change made by you or any user of your account in reliance on, or informed by, a What If response. You acknowledge that any change to your Microsoft 365 tenant configuration is made entirely at your own risk and at your own discretion.

What If analysis is limited to the features and checks that M365Clarity scans. It does not have access to the full internal logic of your Conditional Access policies, Intune compliance rule definitions, or other granular policy configurations — only the configuration status and evaluation results that M365Clarity captures. Results should not be relied upon as a complete or authoritative assessment of the security implications of any proposed change.

Licence cost estimates shown in the Licence Utilisation and Licence Waste tabs are approximations based on publicly available Microsoft pricing. They are not guaranteed to reflect your actual costs, which may differ due to negotiated discounts, promotional pricing, or agreement terms.

The Cyber Essentials Readiness report indicates your Microsoft 365 configuration readiness only. It does not constitute formal Cyber Essentials certification and should not be presented as such. Formal certification requires assessment by an accredited certifying body.

The Identity & Access section provides informational analysis of your Conditional Access configuration, privileged role assignments, at-risk user signals from Entra ID Protection, MFA registration breakdown, and stale account detection. The Conditional Access governance score is an indicative assessment based on detection of best-practice CA policies from your tenant configuration — it does not guarantee security or compliance with any specific framework. At-Risk User data is sourced from Microsoft Entra ID Protection signals and reflects Microsoft's risk assessment; M365Clarity displays this data but does not independently verify or supplement it. PIM role assignment data reflects the state at the time of scan and may not reflect real-time activations.

The Copilot & AI tab provides informational analysis of your Copilot licence tier, adoption metrics, Agent 365 governance posture, and Copilot Cowork eligibility. Adoption figures are drawn from Microsoft Graph usage reports and reflect activity over the preceding 30-day window. Cost estimates (unused seat calculations) use standard list pricing and may not reflect your actual negotiated rates. The Agent 365 Readiness score and Cowork Governance Readiness score are indicative assessments only — they do not guarantee compliance with any specific Microsoft policy or certification requirement for AI agent or Cowork deployment. The Cowork Eligibility check determines whether your current Microsoft 365 plan includes access to Copilot Cowork; it does not verify whether usage-based billing has been configured in the Microsoft 365 Admin Centre, as this information is not available via the Microsoft Graph API.

The Workload Adoption tab retrieves activity counts from Microsoft Graph activity reports (Teams, SharePoint, OneDrive, Exchange Online, Viva Engage) for the preceding 30-day window. Figures represent active users as defined by Microsoft's reporting API and may differ from internal usage statistics or Microsoft Admin Centre reports due to report processing delays (typically up to 48 hours).

The Unlocked but Unused tab compares your licence plan against the M365 feature registry, which is populated from public third-party sources (m365maps.com). Feature inclusion data is indicative — it reflects published licensing diagrams and may not account for specific contractual terms, licence addenda, or configuration prerequisites. M365Clarity does not guarantee that features listed as included in a plan are available to your organisation without additional steps or costs.

AI analysis is powered by Anthropic Claude via the Anthropic API. Your scan data (feature names and configuration statuses) is sent to the Anthropic API to generate responses. Personal data about individuals in your tenant (such as guest account names and email addresses) is not sent to Anthropic. Anthropic does not use API data to train its models.

6b. Ticket export and email sending

The Ticket Export feature (Pro plan) allows you to send pre-formatted finding emails to a recipient email address. By using this feature:

M365Clarity will not send emails to recipient addresses that have previously unsubscribed from M365Clarity communications.

6c. Shareable report links

Pro and MSP users may generate public share links for individual scan results. Share links are valid for 7 days and grant read-only access to the feature names, categories, and status ratings from that scan. No raw configuration data, personal data, or user identity is exposed via share links. You are responsible for the distribution of share links you generate. M365Clarity does not track who accesses share links.

6d. MSP multi-user accounts

MSP accounts may have up to 10 team members (5 included, additional seats at £10/user/month). The MSP account admin is responsible for the actions of all users within their MSP account. M365Clarity is not liable for actions taken by team members added by the account admin. The account admin may remove users at any time from the Manage Accounts tab. When a user is removed, their access is terminated immediately.

For MSP Multi-Tenant accounts, the following data is encrypted at the application layer using per-organisation AES-256-GCM encryption before being stored in our database: client tenant company names and domains, MSP team member email addresses and names, and the MSP account company name and domain. The encryption key is stored separately from the database in Cloudflare's encrypted secrets management system. This means that even with complete database access, this data cannot be read without the separate encryption key. This encryption applies to all MSP data including records created prior to the introduction of this feature. The founding MSP admin's login email address is not covered by this encryption as it is required for authentication, billing, and account recovery.

6e. Tenant disconnection

You may disconnect a Microsoft 365 tenant at any time from Tenant Settings. Disconnecting removes the stored access tokens and prevents future scans and scheduled alerts for that tenant. Scan history and results are retained and accessible for the duration of your subscription. Reconnecting a previously disconnected tenant requires re-authorising via Microsoft OAuth.

7. Data and privacy

Our Privacy Policy (m365clarity.com/privacy) is incorporated into these Terms. By using the service you consent to the data practices described therein.

You retain ownership of your data. We process it only to provide the service. You can export or delete your data at any time.

Where the service accesses personal data about individuals in your Microsoft 365 tenant (such as guest account names and email addresses via the Guest Audit feature), you are the data controller for that data and M365Clarity acts as a data processor. You are responsible for ensuring your use of M365Clarity to process guest data is lawful under UK GDPR.

On account deletion, your personal information is anonymised immediately and all associated data is permanently deleted within 30 days by an automated process. This fulfils your right to erasure under UK GDPR without requiring a separate request.

8. Security

We implement reasonable technical and organisational measures to protect your data. However, no internet service is 100% secure. Please review our Security page (m365clarity.com/security) for details of our security practices.

9. Limitation of liability

To the maximum extent permitted by law, M365Clarity Limited shall not be liable for any indirect, incidental, special, or consequential damages arising from your use of the service. Our total liability in any calendar month shall not exceed the amount you paid us in that month.

10. Indemnity

You agree to indemnify M365Clarity Limited against any claims arising from your violation of these Terms or your misuse of the service.

11. Governing law

These Terms are governed by the laws of England and Wales. Any disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales. Stephen Bennett trading as M365Clarity is the contracting party.

12. Contact

support@m365clarity.com

We endeavour to respond to all support enquiries within 24 hours on business days.