Security
What ArchiveBridge can read and change in your Microsoft 365.
We reply within one business day, Monday to Friday, Sydney time.
Two apps, approved separately.
The free scan reads. It can’t change anything.
It has seven read permissions across your whole Microsoft 365. They would allow reading file contents. The scan reads file lists and usage totals.
Archiving uses a second app.
You approve it later, and only if you go ahead. Its two write permissions cover every site and OneDrive. Choosing sites limits what ArchiveBridge touches, but Microsoft doesn’t enforce that. Per-site grants (Sites.Selected) aren’t available today.
Neither app has mail, calendar, chat or directory-write permission. File access uses a certificate, so ArchiveBridge never sees your passwords. Remove either app in the Entra admin centre, under Enterprise applications.
Controls in place today.
Checked before permanent removal
Each copy is read back. Its SHA-256 fingerprint must match exactly, or the original stays for review. Removal skips the recycle bin.
Encryption
HTTPS in transit. Managed storage is encrypted at rest by its provider by default. Your own bucket follows your settings.
Credentials
Storage credentials are encrypted with a certificate-protected key ring, kept apart from the database.
Console sign-in and roles
Microsoft sign-in uses your MFA and Conditional Access. Password accounts have no MFA yet. Restore and read-only roles can be limited to named sites.
Administration log
Changes to settings, credentials, policies, users and storage go into an append-only log that exports to CSV. File activity shows in the console.
Locked copies
Paid managed storage can lock every copy for 1 to 90 days, renewed daily while you pay.
Files locked as records are skipped.
ArchiveBridge doesn’t read retention policies, legal holds or eDiscovery holds, so keep sites under them out of archiving. Backups still copy those files.
Who can press Restore?
Anyone who has the link. SharePoint permissions aren’t checked again at the click, and the file only ever goes back to its original folder.
The Australian service runs in Sydney.
Processing, the database and file details (names, paths, sizes, dates) are there. Managed storage defaults to Sydney.
Certificates: theirs, not ours.
| Whose | Certificate | Status |
|---|---|---|
| Hosting, database and storage providers | ISO 27001 | Held |
| Database and storage providers | SOC 2 report | Held |
| ArchiveBridge’s own | SOC 2 and ISO 27001 | On the roadmap, not started, no date |
No penetration test, data processing agreement or SLA yet. What isn’t available yet
Check the permissions, then run the scan.
Read-only. Your Microsoft 365 admin approves it. No card.