Microsoft 365 and Azure
Microsoft 365 and Azure, set up securely
I set up Microsoft 365 and Azure so that only the right people get in. Mailboxes, files and Teams are stored in Swiss data centres. Where a service leaves Switzerland, such as sign-in or parts of Copilot in the EU Data Boundary, the documentation says so in writing. Before Copilot is switched on, I clean up oversharing in SharePoint and Teams. Everything is documented so that your team and your auditors can follow it.
Three questions almost every company asks
- Conditional Access checks the person, device and location at every sign-in
- Azure Policy allows only Swiss regions, and each exception for a global service is justified individually
- Copilot only once confidential documents are protected
- Documentation for the Swiss Data Protection Act and for your auditors
- Azure as code in Git, every change with preview and approval
How we start
A check of your Microsoft 365 environment. You get a list of open doors sorted by risk, and a suggestion for what to tackle first.