Power Platform health check, UKFind out what is running in your tenant, and what is about to break.
A five-day independent review of your environments, flows, apps, agents and licences, ending in a rated risk register and a plan you can act on. Fixed price from £1,450, carried out by a PL-200 certified consultant.
Why organisations ask for one
Citizen development worked. Now you need to know what you have.
Most requests for a Power Platform audit start with one of these situations. A health check gives you facts before you spend money fixing the wrong thing.
Nobody can list what is running
Apps and flows have been built across the business for years. IT knows some of them exist, but there is no inventory, no owner list and no idea which ones matter.
Flows fail and nobody notices
A maker left, their account was disabled and the approvals they built stopped quietly. The first sign is a supplier asking why an invoice has not been paid.
Audit or security has started asking
Someone wants to know which flows send data outside the organisation, who can create environments and whether personal data is sitting in the default environment.
You have inherited an estate
A previous supplier or an internal champion built things you now depend on. Before you change anything, you want an independent view of what you have and how fragile it is.
What we check
Eight areas reviewed in every Power Platform environment review.
The same checklist every time, so findings are comparable if you repeat the review next year. We go deeper where your estate needs it.
Environments
- Every environment, its type, region and purpose
- What lives in the default environment and whether it should
- Who can create environments and trials
- Dev, test and production separation for important solutions
DLP policies
- Tenant and environment-level data loss prevention policies
- Business, non-business and blocked connector groups
- Gaps where risky connectors are allowed by default
- Impact of tightening policies on existing flows
Connectors and data exposure
- Connectors in use, including premium and custom ones
- Flows sending data to personal accounts or external services
- HTTP actions and shared connections with broad access
- Apps shared with the whole organisation or with guests
Ownerless and failing flows
- Apps and flows owned by leavers or disabled accounts
- Flows with repeated failures over the review period
- Single-owner automations behind business-critical processes
- Suspended or turned-off flows that should still be running
Solutions and layering
- Which important apps and flows sit in solutions and which do not
- Unmanaged customisations layered over managed solutions
- Connection references and environment variables in use
- How changes reach production today
Security roles and access
- Dataverse security roles, teams and business units
- System administrators and environment makers
- Access granted to individuals rather than roles or groups
- Service accounts and application users
Licensing exposure
- Apps and flows that need premium licences users may not hold
- Per-app, per-user and pay-as-you-go use compared with actual usage
- Dataverse capacity against entitlement
- Unused premium licences you could drop
Copilot Studio agents
- Agents built in each environment and who owns them
- Authentication settings and who can talk to each agent
- Knowledge sources and actions connected to each agent
- Message or credit consumption against your capacity
Sample findings report
What lands in your inbox at the end.
A written report your IT lead, your auditors and your finance team can each read. It is yours to keep and share, with no obligation to buy anything else.
Findings are evidenced, not opinions: where we say a flow is ownerless or a connector is exposed, the report names the item and shows how we found it, so your team can verify it and fix it without us.
Typical findings include business-critical flows owned by one person, premium connectors used without matching licences, and production apps edited directly with no test copy. Your results will depend on your estate.
Report outline
- 1
Executive summary
One page in plain English: overall health rating, the three biggest risks and what to do first.
- 2
Estate inventory
Every environment, app, flow and agent we found, with owner, last run, connector use and a criticality flag.
- 3
Risk register
Each finding rated high, medium or low with evidence, the business impact and a recommended fix.
- 4
Quick wins
Changes your admins can make in a day or two, such as adding co-owners or blocking a risky connector.
- 5
Licensing position
Where you may be under or over-licensed, with the assumptions set out so you can check them against current Microsoft pricing.
- 6
Prioritised action plan
A sequenced plan for the next 90 days, with effort estimates, which you can deliver yourselves or ask us to quote for.
How it works
Five working days from kick-off to walkthrough.
Kick-off and access
A 45-minute call to agree scope and the questions you most need answered. We request read access through an admin account you control.
Discovery
Two to three days pulling inventory from the admin centre, PowerShell and the CoE tooling where installed, then looking closely at what matters.
Analysis
Findings rated and evidenced, quick wins separated from structural changes, and licensing exposure checked.
Report and walkthrough
The written report and a 60-minute walkthrough with your IT lead and any business owners who need to hear it.
Pricing
A fixed-price Power Platform audit, then your choice of next step.
The health check is a standalone piece of work. If licensing is your only concern, the Licensing Review is a smaller first step. If you want someone to keep things healthy afterwards, the Care Plan covers it.
Power Platform Health Check
An audit of your environments, flows and apps with a ranked list of risks and quick wins.
from£1,450
5 working days
- Environment, DLP policy and security role review
- Inventory of apps and flows, including ownerless and failing ones
- Connector and data exposure risks
- Prioritised action plan and a 60-minute walkthrough
Licensing Review
A plain-English review of what you pay Microsoft for Power Platform and what you actually need.
from£395
3 working days
- Review of current Power Apps, Power Automate and Copilot Studio licences
- Per-app vs per-user vs pay-as-you-go comparison for your usage
- Premium connector and Dataverse capacity check
- Written recommendation with estimated annual saving or cost
Care Plan
Ongoing support, monitoring and small changes for the apps and flows you rely on.
from£495/month
Monthly, cancel with 30 days notice
- Monthly block of support hours, unused hours roll over one month
- Flow failure monitoring and fixes
- Small enhancements and licence changes
- Quarterly review call
The fee for a Licensing Review, Health Check or Automation Sprint is credited in full against a build that follows within 60 days.
All prices exclude VAT. Final fixed price confirmed in writing after a free scoping call.
Honest fit check
Is a tenant governance assessment the right first step?
Sometimes a short call is enough. We will tell you if it is.
A good fit when
- Makers across several teams have built apps and flows over time
- You have inherited an estate from a supplier or a departed champion
- Audit, security or IT has asked who can see and move what data
- You are about to scale Power Platform or roll out Copilot Studio
- You want a Power Platform rescue but do not know where to start
Probably not the right tool when
- You have one or two apps and a single maker
- You need a full Microsoft 365 or Azure security review beyond Power Platform
- You want a penetration test or formal certification audit
- You already know exactly what to fix and just need it built
FAQ
Power Platform health check questions
What is a Power Platform health check?
It is a fixed-scope review of your Power Platform tenant: environments, DLP policies, connectors, apps, flows, Copilot Studio agents, security roles and licensing. You get an inventory, a rated risk register and a prioritised action plan. Ours takes five working days and starts from £1,450 ex VAT.
How long does a Power Platform audit take?
Five working days for most organisations of 20 to 500 staff. Larger estates with many environments or several hundred flows can take longer, and we will tell you before starting if that is likely. The walkthrough is usually booked within a week of kick-off.
Can you take over an existing Power Platform environment someone else built?
Yes, and the health check is usually the right first step. It shows what exists, who owns it and what is fragile before anyone changes anything. From there we can fix the urgent items, move important apps into solutions and provide ongoing support if you want it.
What access do you need for a Power Apps audit?
Read access across environments, normally through a Power Platform administrator account you create and control, plus a short call with whoever knows the history. We do not need to change anything to complete the review, and you can remove access the day the report is delivered.
Do we need the CoE Starter Kit installed first?
No. We can gather the inventory from the Power Platform admin centre and admin PowerShell. If you already have the CoE Starter Kit, we use its data and check whether it is still syncing correctly. Whether you need it afterwards is one of the questions the report answers.
What happens after the health check?
You own the report and can act on it yourselves. If you want help, we quote a fixed price for the fixes, governance set-up or support. The health check fee is credited in full against follow-on work booked within 60 days.
Related
Where the findings usually lead
Get an independent view of your Power Platform estate.
A free 20-minute call with the consultant who would carry out the review. We will confirm scope and price, or tell you if a health check is not the right first step.