Table of Contents
Summary
- The new site attestation policy requires site owners to regularly validate details like ownership and sharing settings.
- SharePoint administrators can enable this policy in the SharePoint Admin Center; it is off by default.
- Site owners will receive prompts to confirm site details periodically.
- Enforcement actions, such as restricting access, can be configured for incomplete attestations.
- SharePoint administrators should update documentation and review governance policies to accommodate this capability.
Admin Impact: Medium
User Impact: Medium
Release Start: 17 Dec 2025
Release End: 17 Dec 2025
Services: SharePoint
Category: Stay informed
Tags: New Feature, Admin Action
History
12/16/2025 Item Added to Message Center
Microsoft Message
Introduction
Empower your organization with proactive governance. The new site attestation policy ensures that site owners regularly validate critical details like ownership, membership, and sharing settings. By automating periodic reviews and enforcement actions, this policy helps reduce compliance risks, prevent oversharing, and maintain a secure, well-governed SharePoint Online experience.
When this will happen
This feature is now generally available to all customers.
How this will affect your organization
Who is affected: SharePoint administrators and site owners.
What will happen:
- SharePoint admins can enable site attestation policy in the SharePoint Admin Center.
- Site owners will receive periodic prompts to confirm site details such as ownership, membership, and sharing settings.
- Enforcement actions (such as restricting access or archiving) can be configured if attestations are not completed.
- The feature is off by default and requires admin configuration.
What you can do to prepare
- Notify your SharePoint administrators about the new policy.
- Update internal documentation and workflows to account for this capability.
- Review governance policies and determine enforcement actions for non-compliance.
Learn more: Request recurring site attestations for SharePoint sites
Compliance considerations
No compliance considerations identified, review as appropriate for your organization.