Controls on Third-Party Apps and AI Tools in Microsoft 365

KAUST IT has implemented controls on third-party add-ins and AI tools within Microsoft 365. These controls are part of our commitment to protecting institutional data and maintaining compliance with KAUST’s Information Security and Data Privacy policies.

These controls currently apply to the Microsoft 365 ecosystem (including Outlook, Teams, and Power Automate) and will expand to additional KAUST platforms over time. Only IT-reviewed and approved tools will remain accessible.

What’s Changing

• Only KAUST IT-approved third-party add-ins will remain enabled in Microsoft 365.
  These include apps listed in the IT Software Catalog, IT Service Catalog, or available via Software Center (Windows) and Self Service (Mac).
• High-risk or non-approved apps (e.g., Read.ai, Whiteboard.ai) will be blocked from use.
• All native Microsoft apps, including Power BI, Planner, SharePoint, Lists, and OneNote, remain fully available.

What You Need to Do Now

1. Review your current apps:
   In Office.com, go to Apps → Manage your apps. Check whether the add-ins you use appear in the approved list below. Add-ins not on the approved list are no longer accessible in Microsoft 365.
2. Find an alternative:
   If an add-in you rely on has been blocked, contact IT to identify approved alternatives available in the Software Catalog.
3. Request an exception:
   If no approved alternative exists, you can request an exception by contacting the IT Helpdesk to allowlist the app. Requests are reviewed by Information Security and approved on a case-by-case basis.

Use your browser search to find an item (Ctrl + F on Windows or Command + F on macOS), or browse alphabetically below.

Learn More About Third-Party App Security

Want to learn how free or third-party apps can put your data at risk? Browse these resources to understand how to identify risky apps and keep your information secure:

• Third-Party Apps in Microsoft 365: How to Remove Them and Protect Your Data
• The App May Be Free, But Your Data Is Not: What You Should Know Before You Sign Up
• Policy Reference: Acceptable Use Policy