CCS: last-accessed retention and SharePoint citation analytics

Illustration: Paper/Ink header (AI-assisted). DIGITAL SKILL WORKS LTD / 12 PANES.

Copilot answers are only as clean as the corpus. Two roadmap items — one tagged for the Copilot Control System — push retention and citation visibility into that Steady work.

What shipped / what’s on the roadmap

Purview Data Lifecycle Management — retention based on Last Accessed for OneDrive and SharePoint (MRC 472030) — status In development. Apply retention to each SharePoint or OneDrive item based on when it was last accessed by a user. Explicitly tagged #copilotcontrolsystem. MRC lists Preview October 2026 and General Availability December 2026 — directional; verify before planning.

SharePoint: AI citations analytics for documents and pages (MRC 480725) — status In development. Track how often SharePoint documents, news, and pages are referenced in Copilot and AI agent responses, including site-level aggregation. GA listed August 2026 on the item.

What Learn says

The Copilot Control System security and governance pillar tells organisations to improve Copilot and agent responses by archiving or deleting unneeded content — using SharePoint site lifecycle management and Microsoft Purview Data Lifecycle Management. Foundational controls include data access governance reports, restricted content discovery or restricted access control, and sensitivity labels. Learn documents retention for SharePoint/OneDrive and cloud attachments referenced in Copilot interactions; keep policies aligned with principles of retention when multiple policies apply.

Citation analytics (when available) complements that hygiene: you see which content actually grounds answers, so owners can fix stale or overshared sources.

Why you should care (12 Panes)

Board. This is Steady funding, not a feature launch party.

CISO / GRC. Last-accessed retention is a lifecycle lever for AI corpora. Design with Legal — access telemetry is sensitive.

CFO. Cleaner corpora reduce wasteful Premium use and support reclaim narratives.

Adoption. Analytics without owner follow-up is vanity. Pair with site owners.

Panes. 04 Security · 05 GRC · 06 Cost & Value · CCS management spine.

Diagram

Diagram: 12 Panes / tldraw — board “12 Panes — Blog Diagrams”.

Suggested action

1. Map 472030 onto existing Purview retention designs; do not enable blindly when preview arrives.
2. Prepare site-owner playbooks for citation analytics once 480725 reaches your tenant.
3. Run SAM / data access governance reports now — do not wait for the roadmap month.
4. Tie both items to the CCS security-and-governance working session with Security, GRC, and FinOps.

Communication needed

GRC + Legal: retention basis and access definitions. Security: overshare remediation. Comms: explain that deleting unused content improves Copilot — it is not punishment.

Benefits and risks

Benefits. Less stale grounding. Visible citation demand for important pages. CCS-aligned evidence for audits.

Risks. Misconfigured last-accessed policies. Privacy concerns if access signals are over-interpreted. Analytics without remediation.

Sources

• MRC 472030, 480725
• CCS security and governance
• Retention for SharePoint and OneDrive