Your data never leaves home
Guidance is a thin app over SharePoint and Planner in your Microsoft 365 tenant. No new database, no copy in a vendor cloud, and access follows the permissions you already run.
The security review is short
Every question about storage, access and residency has the same answer: it is your tenant, under the agreements you already have with Microsoft.
Stored in SharePoint
Topics, registers and evidence live in lists and libraries on sites you own. There is no Guidance database.
Your permissions decide
Access follows the Microsoft 365 permissions you already run. Remove someone there and they are gone here too.
AI under your agreement
Guidance Intelligence runs on the Copilot license and terms you already have. No new AI vendor to assess.
Leave with everything
If you cancel, there is nothing to export, because it was never anywhere else. Your content sits in SharePoint, already yours.
Open SharePoint and there it is
Guidance creates plain lists and one document library on a site you choose, each with the Guidance prefix. Browse them, back them up or delete them, without asking us.
Content approval and version history are SharePoint's own, so your retention policies apply unchanged.
Sign-in and permissions
Guidance signs in with Microsoft Entra ID and calls Microsoft Graph straight from the browser. This is the consent prompt your admin sees, and what each line is for.
User.Read
Sign the user in and read their profile.
User.ReadBasic.All
Show colleagues' names and photos, for owners and assignees.
Sites.ReadWrite.All
Read and update the SharePoint lists that hold your topics and registers.
Sites.Manage.All
Create those lists when a site is set up for Guidance.
Files.ReadWrite.All
Open and attach evidence documents in your libraries.
Tasks.ReadWrite
Read and update the user's own tasks in Planner.
Delegated only, each capped by what the signed-in user can already access. Guidance Intelligence asks for nothing extra: it runs under each user's own Microsoft 365 Copilot license.
Sign-in with Microsoft Entra ID
Standard MSAL sign-in in the browser, with the work account you already have. There is no separate Guidance account.
Delegated permissions only
Every call to Microsoft Graph runs as the signed-in user, so Guidance can never see more than that person already can. No application permissions, no service accounts, no client secret.
Consent on your terms
An admin can grant consent for the whole organization once, or users consent for themselves if your policies allow it. How that flow looks is decided by your tenant, not by us.
Bring the hard questions
Storage, access, AI, residency. We like the security conversation, and you write to the people who built it.