Microsoft Copilot security directory

HighQ

Published by Thomson Reuters Incorporated

Medium risk

This connector enables secure and authenticated access to HighQ APIs, allowing seamless integration of collaboration and content management capabilities into custom workflows and applications. It supports document automation, data synchronization, and workflow orchestration—empowering legal and professional services teams to streamline operations, reduce manual effort, and enhance productivity.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.

Available capabilities

This add-on exposes 16 tools or capabilities.

  • Add existing group to site
  • Add site
  • Add User
  • Archive User
  • Create Folder
  • Get folder info
  • Move Documents
  • Retrieve a list of folders
  • Retrieve a list of iSheet items
  • Retrieve file information
  • Retrieve iSheet columns
  • Retrieve user list
  • To create the iSheet item
  • Update site
  • Update site group
  • Upload a file

The interactive security report will load automatically.