A device implemented method to provide intelligence and analysis driven security and compliance suggestions for hosted services, the method comprising: analyzing a tenant's service environment to determine a need for a policy or a configuration change, comprising: retrieving a currently implemented policy or configuration; and determining whether the currently implemented policy or configuration includes protection for available data types; in response to a determination that the currently implemented policy or configuration provides protection for the available data types, providing a confirmation; in response to a determination that the currently implemented policy or configuration does not protect the available data types: detecting a particular type of data from the available data types within the tenant's service environment; determining whether the particular type of data detected is protected by the currently implemented policy or configuration; and in response to a determination that the particular type of data detected is not protected by the currently implemented policy or configuration, determining a suggested policy or configuration based on analysis results and reactively suggesting the suggested policy or configuration to protect the particular type; presenting the suggested policy or configuration along with the analysis results and a prompt to confirm implementation of the suggested policy or configuration; and upon receiving a confirmation of the implementation of the suggested policy or configuration, presenting an option to customize the suggested policy or configuration by modifying settings suggested based on analysis results. analyzing a tenant's service environment to determine a need for a policy or a configuration change, comprising: retrieving a currently implemented policy or configuration; and determining whether the currently implemented policy or configuration includes protection for available data types; retrieving a currently implemented policy or configuration; and determining whether the currently implemented policy or configuration includes protection for available data types; in response to a determination that the currently implemented policy or configuration provides protection for the available data types, providing a confirmation; in response to a determination that the currently implemented policy or configuration does not protect the available data types: detecting a particular type of data from the available data types within the tenant's service environment; determining whether the particular type of data detected is protected by the currently implemented policy or configuration; and in response to a determination that the particular type of data detected is not protected by the currently implemented policy or configuration, determining a suggested policy or configuration based on analysis results and reactively suggesting the suggested policy or configuration to protect the particular type; presenting the suggested policy or configuration along with the analysis results and a prompt to confirm implementation of the suggested policy or configuration; and upon receiving a confirmation of the implementation of the suggested policy or configuration, presenting an option to customize the suggested policy or configuration by modifying settings suggested based on analysis results. detecting a particular type of data from the available data types within the tenant's service environment; determining whether the particular type of data detected is protected by the currently implemented policy or configuration; and in response to a determination that the particular type of data detected is not protected by the currently implemented policy or configuration, determining a suggested policy or configuration based on analysis results and reactively suggesting the suggested policy or configuration to protect the particular type; presenting the suggested policy or configuration along with the analysis results and a prompt to confirm implementation of the suggested policy or configuration; and upon receiving a confirmation of the implementation of the suggested policy or configuration, presenting an option to customize the suggested policy or configuration by modifying settings suggested based on analysis results.