Trust & Security
Security, privacy and trust by design.
Clear information about how Eruditego products handle data, security, privacy and Microsoft 365 integration.
Principles
Built for Microsoft 365 environments
Least privilege
Products should request only the permissions required for their functionality.
Data minimization
We aim to process only the data required to deliver the product.
Transparency
We document how each product interacts with Microsoft 365 and customer data.
Enterprise readiness
We support technical and security reviews for customer environments.
Products
Security information by product
- HTML Web Part
SharePoint product
View security details - Detailed Permissions
SharePoint permission analysis
View security details - Advanced Headers
SharePoint page headers
View security details - Hierarchy Content
SharePoint hierarchy Web Part
View security details - GuestPilot
Microsoft Teams guest governance
View security details - Resilience365
Microsoft 365 business continuity
View security details
Data
Data handling
Data handling differs by product and deployment model. Product-specific documentation is available during customer and partner security reviews.
Data minimization
We aim to process only the information required for product functionality.
Product-specific processing
Storage and processing characteristics vary depending on the product.
Retention & deletion
Retention and deletion information is documented per product.
Detailed review
Data-flow and processing information can be provided during enterprise security reviews.
Permissions
Microsoft 365 permissions
Microsoft 365 permissions depend on the product and enabled functionality.
HTML Web Part
- Microsoft Graph
- Not required
- SharePoint
- Not required
- Teams
- Not required
- Admin consent
- Not required
Detailed Permissions
- Microsoft Graph
- Not required
- SharePoint
- Required
- Teams
- Not required
- Admin consent
- Required
Advanced Headers
- Microsoft Graph
- Not required
- SharePoint
- Not required
- Teams
- Not required
- Admin consent
- Not required
Hierarchy Content
- Microsoft Graph
- Not required
- SharePoint
- Not required
- Teams
- Not required
- Admin consent
- Not required
GuestPilot
- Microsoft Graph
- Required
- SharePoint
- Not required
- Teams
- Required
- Admin consent
- Required
Resilience365
- Microsoft Graph
- Required
- SharePoint
- Required
- Teams
- Required
- Admin consent
- Required
We follow a least-privilege approach and document required Microsoft 365 permissions by product.
Infrastructure
Hosting and infrastructure
Product-specific architecture
Hosting and infrastructure vary by product and deployment model.
Security documentation
Architecture and data-flow information are available during enterprise security reviews.
Resilience365
Resilience365 uses European infrastructure according to its current service architecture.
Encryption
Encryption
In transit
Secure HTTPS/TLS connections are used where applicable.
At rest
At-rest protection is documented per product and deployment model.
Privacy
Privacy and GDPR
- Privacy policyRead the policy
- Data Processing AgreementAvailable on request
- SubprocessorsAvailable on request
- Data retentionProduct-specific information
- Data deletion requestsContact us
- Privacy contactContact us
Eruditego does not present GDPR as a certification.
Contact form
Information you send through the contact form is used only to process your enquiry, qualify the request and follow up on it. It is not used for newsletters or marketing campaigns.
Audience measurement
We use privacy-friendly audience measurement (Plausible Analytics) to understand how our website is used and improve its content and performance. This measurement is limited to aggregate website statistics and is not used for advertising or cross-site tracking.
Browser storage
This website does not use advertising cookies. During a visit, the page you arrived on and any campaign parameters are kept in your browser’s session storage so they can accompany a contact request; they are deleted when you close the tab.
Operations
Operational security
Detailed operational-security information is provided during customer and partner security reviews.
Access control
Product-specific information available on request.
Monitoring
Product-specific information available on request.
Incident management
Product-specific information available on request.
Vulnerability management
Product-specific information available on request.
Compliance
Microsoft ecosystem and compliance context
- Microsoft Partner
- Microsoft Marketplace
- SharePoint
- Teams
- Azure
- Entra ID
Specific compliance and regulatory requirements depend on the product, deployment model and customer environment.
Need to perform a security review?
We can provide product-specific technical information and answer security, privacy and architecture questions during customer or partner evaluations.
Contact
Security contact
For security questionnaires, architecture reviews, privacy questions or responsible disclosure.