Data Governance and Compliance Solution for Microsoft 365

YPO seeks a comprehensive data governance solution built on Microsoft 365 to enhance information security, compliance, and lifecycle management across the organization. The solution must automatically discover and classify unstructured data across SharePoint, OneDrive, and Exchange using contextual analysis to identify sensitive, misclassified, or high-risk content. Key capabilities include: automated or workflow-based sensitivity labelling with robust exception handling; safe and controlled remediation with rollback functionality; identification and management of obsolete and stale data aligned with retention policies; continuous monitoring of external sharing risks, permission drift, and unlabelled content; real-time dashboards and exportable reports for operational oversight; and ISO27001-ready evidence packs to support audit readiness. The solution must operate entirely within YPO's Microsoft 365 tenant without data exfiltration, maintain strong security controls, and ensure full compliance with GDPR and organizational requirements.