For IT and procurement
What your IT team will ask, answered.
Executive brief
| What it does | Moves old SharePoint files, or ones a folder or column rule picks, to cheaper storage, leaving a link file with a Restore button. It also backs up SharePoint and OneDrive. |
|---|---|
| What it saves | US$35 per TB a month under 10 TB, before tax, with managed storage (US$24 on your own storage). Microsoft’s extra storage is about US$205; your agreement may differ. Try your numbers. |
| Risks | Nothing is removed until its copy checks out. Record-locked files are skipped. Write access covers your whole Microsoft 365. |
| Who runs it | ArchiveBridge Pty Ltd (ABN 68 701 459 261), Australia. |
| Support | We reply within one business day, Monday to Friday, Sydney time. |
| Stage | Early access. No public customer references yet. |
Security and architecture
Permissions, by purpose
| Used for | Scan app (read-only) | Protection app (later) |
|---|---|---|
| SharePoint files | Sites.Read.All | Sites.ReadWrite.All: read, write link files, restore, remove originals |
| OneDrive files | Files.Read.All | Files.ReadWrite.All: backup and restore |
| Finding OneDrives | User.Read.All | User.Read.All |
| Group and Teams sites | Group.Read.All | Group.Read.All, Team.ReadBasic.All, Channel.ReadBasic.All |
| Usage totals | Reports.Read.All | Reports.Read.All |
| Storage allowance | Organization.Read.All | Organization.Read.All |
| Sign-in (delegated) | User.Read | User.Read |
Both grants cover your whole Microsoft 365. Choosing sites isn’t a boundary Microsoft enforces. The scan reads listings and usage totals, though its permissions would allow reading file content. Revoke either app under Enterprise applications in Entra.
Encryption, location and audit
| Encryption and keys | HTTPS (TLS) in transit. Managed storage is a dedicated bucket per customer, encrypted at rest by the storage provider by default, with no extra file encryption from ArchiveBridge. We run it and hold its keys. Your own bucket: your keys, your provider’s settings. Storage credentials are encrypted at rest with a certificate-protected key ring, kept apart from the database. |
|---|---|
| Data location | Australian service: processing, database and file metadata stay in Sydney; managed storage defaults there. Your own bucket stays where you put it. |
| Audit log | Admin changes go to an append-only log, exportable to CSV. File activity shows in the console. |
Records and compliance
ArchiveBridge is a storage and backup tool, not a records-management system.
| Retention labels | Files whose retention label locks them as a record are skipped and left in SharePoint. A label that marks a record without locking it isn’t read. If Microsoft refuses the delete, the file stays beside its link file, listed for review. |
|---|---|
| Retention policies | Not read. Microsoft keeps its own copy of files deleted under a retention policy, so archiving there may not free space until the policy ends. |
| Legal and eDiscovery holds | Not read. If Microsoft blocks a change, the file stays put, listed for review. Keep sites under a hold or retention policy out of archiving. |
| Backups | Backups copy held, labelled and record-locked files too. Backup never changes or removes anything. |
| Preservation Hold Library | Never archived, like SharePoint’s other system libraries. |
| Versions | Only the current version is archived, unless you turn on “copy earlier versions” (up to 10 per file by default). SharePoint’s version history goes with the original. |
| After a restore | The file takes its folder’s current permissions. Original permissions, author and other columns don’t come back. |
Restore and exit
| Cost | Restores to SharePoint are never charged, in bulk too, with no yearly limit (Terms, section 3). A full export elsewhere is quoted for your approval first; that is policy, not yet in the Terms. |
|---|---|
| Speed | No measured restore time (RTO) yet. We plan large restores with you. |
| Bulk restore | From the console: folders or whole sites, up to 250 files per confirmation. |
| Your files | Ordinary files in a standard storage bucket, under their original names and folders, readable with any S3 tool. Your own bucket is already yours. |
| When you leave | Restore first: link files need ArchiveBridge. Then remove both Enterprise applications in Entra; closing the account doesn’t remove them. |
| Managed storage | You choose: restore everything to SharePoint, free; take over your dedicated storage account (we hand you its admin details, and you keep paying for it or move the files); or we delete it on request. |
Contract documents
Available today: Terms of service and Privacy policy.
Not available today
- Uptime commitment (SLA)
- Status page
- Data processing agreement
- Breach-notice timeframe beyond the Privacy Act
- Insurance statement
- Penetration test
- Per-site permissions (Sites.Selected)
- Our own SOC 2 or ISO 27001 (on the roadmap, not started, no date)
- A written wind-down plan
Need one to buy? Tell us which. Talk to an engineer
Sample business cases
- Sample indicative business case (PDF, 1 page)
- Sample measured business case (PDF, 2 pages)
Both are for the same fictional company. The indicative case prices backing up everything Microsoft reports (3.62 TB) at A$189.50 a month. The measured case prices archiving only files that match the 2-year rule (2.05 TB) at A$118.50.
Reviewers’ questions
Is per-site access (Sites.Selected) possible?
Not available today. See Security and architecture. The scan app has no write permission, and you can run the scan without approving the second app. Neither app has mail, calendar, chat or directory-write permission. File access is app-only and uses a certificate credential, so ArchiveBridge never sees or stores your Microsoft 365 passwords.
What happens to search and links?
While a file is archived, SharePoint search finds its link file by name, but not the words inside the original. Links to the original won’t open it.
The link file is a small web page named like the original plus .html, such as report.docx.html. It shows the file’s details and a Restore button. After a restore, the file returns to the same path. Old sharing links don’t come back.
Is there MFA or single sign-on?
You can sign in with your Microsoft work account, so your own Entra MFA and Conditional Access apply. Some regions also offer email and password sign-in: at least 8 characters, locked after 5 failed tries. ArchiveBridge has no MFA of its own for those accounts yet, so we recommend Microsoft sign-in.
Who can use a restore link?
Anyone who has the link. It contains an unguessable ID, and people normally only see it if SharePoint lets them open the link file. ArchiveBridge doesn’t check SharePoint permissions again when someone clicks. Restore only writes the file back to its original SharePoint folder, never to the person clicking. Requests are rate-limited.
How is ArchiveBridge billed?
Free under 100 GB, with no card and no time limit. The 100 GB counts backups, archived files and kept versions together. Above 100 GB you pay for what you store. We measure it every day and charge for each day at the published price per TB, automatically, to your card. Month to month, no lock-in. No per-seat fees. Through an IT provider? We bill the provider, not you.
See your own business case.
Read-only. Your Microsoft 365 admin approves it. No card.