Security
How we secure your data
Data security is more than just a component of information management at harmon.ie. Our approach to security has three key elements–design, standards, and best practices for application development. Let’s examine how these three elements combine to secure your data.
Serverless Architecture
harmon.ie is a client-side application designed to integrate with your company's Microsoft 365 (M365) tenant or SharePoint on-premises system.
It operates entirely on the client side, meaning it does not rely on any harmon.ie SaaS, backend, or external servers. Instead, harmon.ie’s add-ins connect directly to your existing infrastructure, ensuring that data remains within your organization’s control without requiring external cloud services.
Information Stays on Your Tenant
The harmon.ie plugin resides exclusively within your Microsoft tenant or on-premises servers, so your emails, files, and data are protected by all the security precautions, practices, and technology already protecting your current Microsoft environment. That means there’s no risk of data leakage, theft, or manipulation because your data never leaves your premises. Even better, harmon.ie leverages your existing Microsoft environment permissions, for more seamless integration without additional steps to secure your emails and files.
Certifications ensure harmon.ie meets the highest standards
harmon.ie is proud to hold the following certifications:
✔ Microsoft AI Content Partner
✔ Microsoft 365 App Compliance program for new harmon.ie!
✔ Microsoft Trusted Gold Partner
ISO-27001 Certification
We are proudly ISO-27001 certified by the Standards Institution of Israel. ISO 27001 is an international certification, developed by the International Standards Organization – the gold standard in information security management. ISO 27001 details requirements for establishing, implementing, maintaining, and continually improving an information security management system (ISMS). harmon.ie applies these standards not just to our own internal operations, but also to the applications we develop. By choosing harmon.ie, you're partnering with a company that places the utmost importance on the confidentiality, integrity, and availability of your information.
Microsoft Preferred Content AI
harmon.ie also holds the Microsoft AI Content Partner certification. This certification is awarded by Microsoft to companies with proven success in high-impact scenarios helping customers from planning and advisory through the deployment and implementation of advanced content management solutions, including Microsoft SharePoint, SharePoint Premium, OneDrive, Purview, and others, such as Microsoft 365 Backup, and Microsoft 365 Archive.
Microsoft 365 Certification for New harmon.ie
In recognition of our security-forward approach, Microsoft has certified that New harmon.ie add-in meets the rigorous standards of the Microsoft 365 App Compliance program. Before making this certification award, Microsoft vetted New harmon.ie against controls from leading industry frameworks. Microsoft found New harmon.ie to demonstrate the latest security and compliance practices to protect customer data. In addition to closely examining the code of New harmon.ie, Microsoft also audits the processes and procedures used to develop New harmon.ie, adding an additional layer of protection. With this certification, users can be assured that New harmon.ie is GDPR compliant, does not perform any automated decision-making that could result in legal liability, does not collect data from minors, nor does it collect any sensitive categories of data.
Microsoft Trusted Gold Partner
harmon.ie is proud to be a trusted Microsoft Gold Partner. This designation means that Microsoft has determined that harmon.ie is committed to excellence in evolving Microsoft technologies, and focuses on delivering benefits to clients via Microsoft solutions.
Microsoft Gold partners:
✔ Participate in Microsoft’s Customer Satisfaction Index
✔ Have a record of positive customer experiences from a specified number of customers
✔ Employ a specific number of workers with the relevant Microsoft exam-based certifications
✔ Stay up-to-date on the latest Microsoft and industry developments
✔ Perform well on regular reviews of customer service and competence service ratings
Best Practices
Best practices for the design and development of secure applications at harmon.ie include:
- Principle of Least Privilege (POLP). This means that we designed harmon.ie’s access controls to ensure end users have the minimal needed rights for the applications, database, and infrastructure.
- User access control. All users are limited to role-based controlled access (i.e. read, write, and modify) to information and applications accessed via harmon.ie, mirroring their Microsoft 365 rights.
- No access for us. Because your data stays in your environment, no harmon.ie employees have direct access to your data and have no way to download private information under any circumstances.
- Audit log. An audit log tracks user history, so you can always see who changed what and when.
- Security policy. harmon.ie maintains a detailed security policy and updates it regularly.
Microsoft Trusted Partner
Trusted by 1600+ leading companies
