💡 Our Technical Review in summary
Summary
- Feature Overview: Microsoft is introducing an automated evaluation system for Teams apps and agents to replace the current manual review process for security, privacy, and compliance.
- Roadmap ID: 532720.
- Objective: To provide IT admins with a scalable, consistent way to assess third-party tools against organizational standards (e.g., GDPR, SOC 2, Data Residency).
- Timeline: Rollout is scheduled to begin in mid-February 2026 and should be completed by late February 2026.
Impact
- Administrative Workflow: Admins can now define “one-time” trust requirements. The system will then automatically generate a score for every app/agent based on those parameters.
- Teams Admin Center (TAC) UI Changes:
- A new Evaluation score settings tab will be added under “Teams apps.”
- A new Evaluation score column will be added to the “Manage apps” inventory list, allowing for sorting and filtering.
- Individual App details pages will feature a granular evaluation report showing exactly which requirements were met or missed.
- Policy Enforcement: This feature is informational and decision-supportive; it will not automatically change the “Blocked” or “Allowed” status of apps, nor will it modify existing app metadata.
- Default State: The feature will be enabled by default and does not require manual activation.
Action Required
- Review Internal Standards: Before the February 2026 rollout, IT and Compliance teams should finalize the list of mandatory certifications (e.g., SOC 2 Type II, HIPAA, specific regional data residency) that will inform the scoring logic.
- Update Approval Documentation: Update internal SOPs (Standard Operating Procedures) for app approvals to incorporate the use of the new Evaluation Score as a primary filter.
- Monitor Settings Tab: Once the feature is live, navigate to Teams admin center > Teams apps > Evaluation score settings to configure your organization’s specific requirements.
- User Communication: No end-user communication is required, as this update is strictly limited to the Teams Admin Center interface.
Microsoft Official Update
Service: N/A
Category: stayInformed
Severity: normal
[Introduction]
Today, admins must manually review trust and compliance information for Teams apps and agents to determine whether they meet their organization’s security, privacy, and compliance requirements. To make this process more scalable and consistent, Teams will introduce a centralized evaluation experience. Admins will define their organization’s trust requirements once, and the system will generate a score and detailed evaluation report for each app and agent based on those requirements. This will help organizations make faster, more consistent approval decisions.
This message is associated with Microsoft 365 Roadmap ID 532720.
[When this will happen]
General Availability (Worldwide and GCC): We will begin rollout in mid-February 2026 and expect to complete by the end of February 2026.
[How this will affect your organization]
Who is affected: Admins who manage apps and agents in the Teams admin center.
What will happen:
- A new evaluation score settings tab will appear in Teams admin center > Teams apps.
- Admins will be able to configure approval requirements—such as GDPR compliance, SOC 2 certification, and data residency—one time for their organization.
- The system will automatically calculate an evaluation score for each app and agent based on how many requirements are met.
- A new evaluation score column will appear in Teams admin center > Teams apps > Manage apps, with options to sort and filter by score.
- A detailed evaluation report will be available on the App details page, providing requirement-by-requirement detail.
- This feature will not change app enablement or blocking behavior and will not modify any underlying metadata.
- The feature will be enabled by default and will not require admin action to activate.
[What you can do to prepare]
No action is required. This feature will be available automatically in the Teams admin center.
Admins may choose to review their approval workflows once the feature becomes available.
[Compliance considerations]
No compliance considerations identified. Review as appropriate for your organization.
