Epiteera is a web service that automatically assesses the security of a Microsoft 365 environment. An administrator signs in with the Microsoft 365 account and connects the tenant; Epiteera reads configuration data only, not the contents of files or emails. The analysis covers four areas: devices, identities and access, data protection, and collaboration settings in Teams, SharePoint and OneDrive. You get a dashboard with findings scored by severity, remediation steps and a tenant overview. Plans exist for small and mid-sized businesses, larger organisations, and IT providers managing several client tenants. Epiteera is delivered as SaaS by Kleeo GmbH.
Kleeo GmbH is based in Glattpark, Switzerland. Switzerland is not an EU member state but is an EFTA country with an adequacy decision from the European Commission. According to the privacy policy, the service runs on Microsoft Azure in Switzerland and Europe, and data processing is primarily subject to Swiss law, with GDPR requirements met where they apply. The service is therefore built on Microsoft infrastructure, a US provider. The vendor states nothing about a parent company of Kleeo.