Microsoft Copilot security directory

ISOPlanner

Published by REDLAB

High risk

ISOPlanner lets you automate compliance work by reacting to events and performing actions such as creating or updating tasks, incidents, and library items. Ideal for ISO 27001/27701 workflows. Requires an active ISOPlanner license.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can permanently delete data: This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.
  • Sends your data to outside companies: Anything you share with this connector flows to a third-party service. That company sees, stores, and may use the data according to their own policies.
  • Stores long-lived access tokens: This connector requires persistent credentials. If those tokens leak or are stolen, whoever holds them gets the same access you granted.

Available capabilities

This add-on exposes 35 tools or capabilities.

  • Add a library item to a task
  • Add a library item to an event
  • Add context to a KPI data point
  • Create a KPI data point
  • Create a subtask for an event
  • Create a task
  • Create a webhook
  • Create an asset
  • Create an event
  • Create an event for an approval
  • Create or Update Library item
  • Delete a KPI data point
  • Delete a subtask of an event
  • Delete a task
  • Delete an asset
  • Delete an asset for an external Id
  • Delete an event
  • Get a KPI
  • Get a KPI data point
  • Get a Library item
  • Get a Library item by Url
  • Get a subtask of an event based on Id
  • Get a subtask of an event based on Name
  • Get an asset

The interactive security report will load automatically.