The standard productivity apps most businesses already know. Word for documents, Excel for spreadsheets, PowerPoint for presentations, OneNote for notes. Available in the browser on all plans; desktop installs (on up to 5 PCs/Macs per user) require Standard or Premium.

Full versions of Word, Excel, and PowerPoint that run entirely in a browser — no software installation needed. Supports real-time co-editing so multiple people can work on the same file simultaneously. Works on any device including Chromebooks and tablets.

The mail server that powers Outlook. It's what gives every user a real business email address (name@theirdomain.com), handles sending and receiving, syncs calendars across devices, and enables shared mailboxes like info@ or support@ without needing a separate paid account for each.

Shared file storage for the whole organization — every Teams channel has a SharePoint library behind it automatically. Also used to build internal sites, company news pages, and document hubs. Think of it as the team's shared drive plus a lightweight intranet builder.

A ChatGPT-style AI assistant built into Microsoft 365. Can help draft emails, summarize documents, answer questions, and do research using live web data. This is the chat-only version — it doesn't work inside Word, Excel, or Outlook directly. The full version that does is a separate paid add-on.

Monitors every device on the network 24/7 for viruses, ransomware, and suspicious behavior. Unlike basic antivirus, it can detect threats it's never seen before and automatically isolate an infected device to stop it from spreading to the rest of the team.

Lets an IT admin centrally manage every device that accesses company data — Windows PCs, Macs, iPhones, and Android phones. Can enforce password policies, push app installs, require encryption, and remotely wipe a lost or stolen device. Supports BYOD — it manages only the work data on a personal phone, leaving personal content untouched.

Protects email against sophisticated attacks that basic spam filters miss. Every link in an email is scanned in real time before the user clicks it. Suspicious attachments are opened in an isolated sandbox first to check if they're safe. Also detects impersonation attacks — emails pretending to be the CEO, a bank, or a known vendor.

Controls who can log in to Microsoft 365, from where, and under what conditions. The main feature is Conditional Access — rules that automatically block or challenge logins based on context, like an unknown device, a foreign country, or an unusual time of day. Also enables advanced MFA options and single sign-on across connected apps.

Scans outgoing emails, Teams messages, and shared files for sensitive content — credit card numbers, Social Security numbers, health records, and more. When something sensitive is detected, it can automatically block the message, show a warning to the user, or log it for admin review. Helps businesses stay compliant with regulations like HIPAA and PCI.