Security
When responsibilities change, access follows.
A new responsibility means a new role in Dynamics 365. Doclave carries it through to SharePoint: new access granted, previous access removed, every change on record.
One security model
Documents stay in your tenant
Every access change is logged
No obligation. Bring your IT or security lead.
NOW
Govern access by purpose
Protect sensitive information
Access only with a business reason
Least access by default
Proof, on demand
THEN
Protect the technology
Perimeter protection
Network security
System hardening
Identity management
01 — The shift
Security is now about need-to-know, and proving it.
NIS2 moves security from technology to purpose. Access to a document needs a business reason, and people should reach as little information as their role requires. You also need to show that it holds.
NIS2 Directive: Article 21 covers access-control policies; Article 20 makes management accountable.
02 — The gap
The business develops and employee roles change.
Dynamics 365 keeps roles current. SharePoint keeps its own permissions, and nothing connects the two. When someone moves on or leaves, their access stays behind.
One security model, kept in sync automatically.
Organisational changes applied automatically
Copilot only finds what the user can already open.
Access reviewed in one place
Identity
03 — How it works
Change a role once. SharePoint follows.
No new process, and nothing for anyone to remember. Doclave picks up each change in Dynamics 365, carries it through to SharePoint and keeps the record.
You change a role
A role is added, moved or removed, in Dynamics 365 or via Entra ID.
Doclave picks it up
Doclave picks up the change. No scheduled jobs, no tickets.
SharePoint follows
SharePoint follows: new access granted, previous access removed.
The change is recorded
Every change is logged and traced to the event behind it.
04 — Built on a security foundation
Built on a security foundation
Access that scales with your organisation. One security model instead of two, and evidence without audit preparation.
Compliance
Compliance reporting, out of the box.
An auditor asks who could open HR contracts in March. Doclave shows each role change and the SharePoint access that followed, time-stamped. No spreadsheet hunt.
Access by role
Full change history
Scalability
Access that grows with you
New hires get access through their role in Dynamics 365. No ticket.
Less maintenance
No manual errors
No manual workload
Standard reporting and documentation
Supports alignment with
NIS2 · ISO 27001 · GDPR
Access requirements, with the evidence to match.
Access tickets
0
No access tickets when roles change.
Our side
05 — Walk the talk
We hold ourselves to the boundary we sell.
Four checkpoints on our own side of the line — documented, not claimed.
Access
What Doclave can touch in your tenant, and why.
[Verified detail]
Data
What we store, where, and for how long.
Logs hold reference IDs only, never names or personal data. Documents stay in your tenant.
Hosting
Where it runs and who operates it.
Runs in EU data centres. Documents stay in your tenant. Doclave is a Microsoft Partner.
Operations
Backed up, monitored, recoverable.
Backups: daily for 7 days, weekly for 4 weeks, monthly for 6 months. Compliance checks run continuously, with automatic reconciliation.
Your tenant
Access in step with your business. See it for yourself.
Book 30 minutes and bring your security questions. Or take the overview to your team first.
