Dear KAUST Community,
As part of KAUST’s ongoing efforts to strengthen our digital collaboration environment and comply with Information Security and Data Privacy policies, Information Technology is introducing new controls for third-party app add-ins/plugins and AI bots.
These controls will be implemented in phases, beginning with the Microsoft 365 ecosystem (including Outlook, Teams, Power Automate, etc.), and later extended to other KAUST platforms. The goal is to protect institutional data, minimize security risks, and ensure that only approved, secure tools are used.
What this means for you
- All native Microsoft apps will remain available (including Power BI, Planner, SharePoint, Lists, OneNote, etc.).
- Starting Thursday, October 23, 2025, only KAUST IT-managed/supported third-party app add-ins/plugins will continue to be enabled in Microsoft 365.
- (These include apps listed in the IT Software Catalog, IT Service Catalog, or on the Software Center on Windows and Self-Service app on Mac).
- Non-KAUST IT-managed/supported, or high-risk third-party apps (e.g., Read.ai, Whiteboard.ai) will be blocked from use.
You can view a full list of the KAUST IT-managed/supported app plugins that will continue to be enabled in the Microsoft 365 ecosystem:
What you need to do now
1. Review your current apps
In Office.com, go to Apps → Manage your apps. Check if the third-party app plugins that you use are on the permitted list.
2. Plan ahead
If you find that you are using apps that are not permitted, make the necessary arrangements to find alternative solutions that are managed/supported by IT, or plan to discontinue using these apps before October 23, as they will not be available after that date.
3. Request an app review
If your work heavily relies on a third-party app that is not in the permitted list, please complete this App Review Form. This will help us understand your needs in order to provide you with more secure alternatives or to further review your app for compliance and necessity.
Learn more about third-party app security
Curious how free or third-party apps can put your data at risk?
Check out these quick reads to learn how to spot risky apps and keep your information secure:
- Third-Party Apps in Microsoft 365: How to Remove Them and Protect Your Data
- The App May Be Free, But Your Data Is Not: What You Should Know Before You Sign Up
- Policy reference: Acceptable Use Policy
What’s next:
A follow-up announcement will be shared next week, before October 23, providing more details and clarification on the process.
Thank you for staying proactive and helping us keep KAUST’s digital environment secure.
KAUST IT
it.kaust.edu.sa