University IT
M365 Add-ins and Plugins
To ensure Stanford data is appropriately protected, third-party add-ins and plugins must complete a formal review before being used with a university Microsoft 365 account.
Hundreds of add-ins and plugins for Microsoft 365 applications like Outlook, Excel, Word, PowerPoint, and Teams are offered by third-party developers. Third-party add-ins and plugins are not built or supported by Microsoft. While some can be useful, others have the potential to introduce significant risk.
How the request process works
In the table below, you'll find a list of the most commonly used add-ins/plugins with a color-coded status that indicates the outcome of the review.
Approved for everyone to use with low and moderate risk
Enabled on case-by-case basis
Blocked but may be subject to re-review at a later date
As you navigate the request process, keep these points in mind:
- If you are approved for an app, you can expect to gain access within three to four business days.
- If you don’t see the add-in or plugin you’re interested in, submit a request for it to be reviewed.
- A data risk assessment (DRA) will be required if you are handling high-risk data with the plugin or add-in,
- The costs for certain university-provided services such as Zoom are covered; otherwise, you will need to purchase a license, if needed.
- Please note that any add-ins/plugins and applications requiring access to our e-mail system will not be approved unless they are part of M365 applications.
| M365 Add-in/Plugin | Application | Status |
|---|---|---|
| 9folders | Outlook | Blocked but may be subject to re-review at a later date |
| Adobe Acrobat | Outlook | Blocked but may be subject to re-review at a later date |
| BioRender | PowerPoint | Enabled on case-by-case basis |
Note: Not controlled by M365 but by Calendly. UIT recommends using M365 Booking instead. | Outlook, Teams | Enabled on case-by-case basis |
| M365 Designer | Application | Blocked but may be subject to re-review at a later date |
| EndNote | Word | Enabled on case-by-case basis |
Note: Approved only for the Grammarly Education version with a | Word | Enabled on case-by-case basis |
| Jaggaer | Word | Enabled on case-by-case basis |
| MathType | PowerPoint, Word | Enabled on case-by-case basis |
| Mendeley Cite | Word | Enabled on case-by-case basis |
| Paperpal | Word | Enabled on case-by-case basis |
| Power BI | PowerPoint | Enabled on case-by-case basis |
| RefWorks | Word | Enabled on case-by-case basis |
| SciWheel | Word | Enabled on case-by-case basis |
| SmartCite | Word | Enabled on case-by-case basis |
| Smartsheet | Outlook | Blocked but may be subject to re-review at a later date |
Note: Need to purchase additional licenses. | Excel (macOS only) | Enabled on case-by-case basis |
| Solver | Excel | Enabled on case-by-case basis |
| Superhuman | Outlook | Blocked but may be subject to re-review at a later date |
| Zoom | Outlook | Available for everyone in M365 app store |
| Zotero | Word | Enabled on case-by-case basis |
FAQs
What is a third party add-in/plugin?
Third-party software is created by someone other than the hardware or operating system creator.
Why must third-party add-ins be reviewed and approved before use?
When you integrate a third-party add-in with your account, you may be granting access to your calendar, data, email, and more. If these services are accessing your data, it’s important to know what they’ll do to protect it.
What is the criteria used to review add-ins/plugins?
Multiple criteria will be used, including what type of data the software will access, whether or not it’s been reviewed previously, and the security standards of the vendor.
What if add-in I want to use isn’t approved?
If you don’t see the add-in or plugin you’re interested in, simply complete this form to request a review.
How do I get an add-in/plugin that’s approved for everyone?
You can submit a request to ask that the add-in/plugin be enabled or download it from the App store.
How do I get an add-in/plugin that can only be enabled on a case-by-case basis?
You can submit a request to ask that the add-in/plugin be enabled. Please keep in mind it may take three to four business days for the request to be processed. Once enabled, open the Microsoft application where you want to use the add-in/plugin and navigate to the "Add-ins" or "Get Add-ins" section to access the add-in/plugin you've requested.
Does the required review policy only apply to Microsoft 365 add-ins/plugins?
For now, this review process applies only to Microsoft 365. However, in the future we may expand the process to include other Stanford platforms.
Do I need to request permission to use a Microsoft app that is part of my license, such as Teams or PowerBI?
No, this request process is for third-party application and not applications that are created by Microsoft.
Does the university pay for the license?
The costs for certain university-provided services such as Zoom are covered. Otherwise, you will need to purchase a license, as needed.
