Avepoint UK Ltd

AvePoint Policies for Microsoft 365

AvePoint Policies makes it easy to automate common rules for access, settings, and other Microsoft 365 configurations. Set white/black list policies, rules for external sharing, and more. When AvePoint Policies finds configuration drift, you can notify and revert the change automatically. Securing collaboration in Teams, Groups, Sites, and OneDrive.

Features

  • Default policy templates based on reccomended rules.
  • Automate or notify corrective action for policy violation.
  • 30+ out-of-the-box policies.
  • Monitor and analyse all actions taken by a specified policy.
  • Tenant or individual-level policy rules.
  • Alert or revert out-of-policy changes as quickly as 2 hours.
  • Ghost user detection
  • Remove licenses from blocked users.
  • Remove licenses from inactive users.

Benefits

  • Create rules that align with requirements.
  • Configure rules for access, sharing, tagging, verisons, and more.
  • Monitor rules, best practices, or policy compliance.
  • Build policies based on insights and best practices.
  • Revert or notify configuration drift and security issues.
  • Gain insights and batch fixes immediately.
  • Show impact of IT actions.
  • Track your risk score to demonstrate security posture
  • Centrally audit admin activity.

Pricing

£1.17 a user a month

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at salesuk@avepoint.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

2 4 2 9 6 5 5 3 0 4 1 5 9 5 6

Contact

Avepoint UK Ltd Sarju Raja, Jason Lee, or Adam Callinan
Telephone: 02074215199
Email: salesuk@avepoint.com

Service scope

Software add-on or extension
Yes
What software services is the service an extension to
Office 365, Microsoft 365. Microsoft Office 365. M365
Cloud deployment model
Public cloud
Service constraints
No
System requirements
None

User support

Email or online ticketing support
Email or online ticketing
Support response times
Telephone requests are immediate, other methods will be within 2 hours or more dependant on the severity of the request. For more information https://avepoint.com/products/support.
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.1 AA or EN 301 549
Phone support
Yes
Phone support availability
24 hours, 7 days a week
Web chat support
Yes, at an extra cost
Web chat support availability
24 hours, 7 days a week
Web chat support accessibility standard
WCAG 2.1 AA or EN 301 549
Web chat accessibility testing
AvePoint conducts extensive Quality Assurance before any release, and follows industry best practices for Accessibility. For further details, contact AvePoint.
Onsite support
Yes, at extra cost
Support levels
We provide - Low, Medium, High and Very High levels, more information can be found at https://www.avepoint.com/products/support
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Onboarding services are defined and agreed in a Statement of Work
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction
Customers may request a copy of the data via our support team.
End-of-contract process
The functionality will stop working and the customers obligations will end. Where applicable customer data can be exported.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Opera
Application to install
No
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
Not applicable
Service interface
Yes
User support accessibility
WCAG 2.1 A
Description of service interface
Users access services via http://www.avepointonlineservices.com/login. Users have access to available functions through our GUI based on their permissions or role.
Accessibility standards
WCAG 2.1 A
Accessibility testing
AvePoint complies with common accessibility guidelines. In addition, extensive Quality Assurance testing is performed before any release. Customers can optionally subscribe to "Insider Releases" to gain early access to updates, and provide feedback.
API
No
Customisation available
No

Scaling

Independence of resources
We employ a number of methods including elastic scaling to manage performance.

Analytics

Service usage metrics
Yes
Metrics types
Administration and Audit Reports provide basic information on all site collections, sites, Office 365 users, Office 365 Groups, and Microsoft Teams managed by AvePoint Cloud Management.
Reporting types
  • Real-time dashboards
  • Reports on request

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Security Clearance (SC)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
Yes
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least every 6 months
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
Data sanitisation process
Yes
Data sanitisation type
Explicit overwriting of storage before reallocation
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach
Not Applicable
Data export formats
CSV
Data import formats
CSV

Data-in-transit protection

Data protection between buyer and supplier networks
  • Private network or public sector network
  • TLS (version 1.2 or above)
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
Availability is set within the SLA
Approach to resilience
AvePoint leverages Microsoft Azure for hosting it's cloud service, which has a number of data centers for HA.
Outage reporting
Portal notifications with additional direct communication when appropriate.

Identity and authentication

User authentication needed
Yes
User authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password
Access restrictions in management interfaces and support channels
All authentication is carried out against Microsoft Azure or any support Azure authentication method
Access restriction testing frequency
At least every 6 months
Management access authentication
Identity federation with existing provider (for example Google Apps)

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
At least 12 months
How long system logs are stored for
At least 12 months

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
ControlCase
ISO/IEC 27001 accreditation date
29/06/2018
What the ISO/IEC 27001 doesn’t cover
Not Applicable
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
No
Cyber essentials plus
No
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
  • CSA CCM version 3.0
  • ISO/IEC 27001
Information security policies and processes
ISO: 27001

Operational security

Configuration and change management standard
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach
Change Management is documented, requested, reviewed, approved, tested, and finally rollowed out during off hours in order to have minimal effect on customers.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
We use AppScan to perform OWASP testing on every patch release
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
We leverage the Azure Health Status page as well as service monitoring. Please refer to Azure documentation https://docs.microsoft.com/en-us/azure/best-practices-network-security for details. Customers are notified via Administrative Console alerts or directly by Customer Success as threats are identified, with proposed course of action.
Incident management type
Supplier-defined controls
Incident management approach
Long standing experienced help-desk available 24x7, backed by breach management procedures to notify customers, post information publicly when necessary, and dedicate development resources to a swift resolution.

Secure development

Approach to secure software development best practice
Supplier-defined process

Public sector networks

Connection to public sector networks
No

Social Value

Fighting climate change

Fighting climate change

AvePoint are a Cloud based delivery organisation therefore reduce the environmental impact of running Datacenters in the organisations. The service also allows workers to work securely from home therefore reducing the carbon footprint by minimising the need to travel
Covid-19 recovery

Covid-19 recovery

AvePoint are helping raising the Digital Skills in the region through education platforms
Tackling economic inequality

Tackling economic inequality

AvePoint are offering a Digital Inclusion solution free of charge for the digital deprived in the region to raise the skills and ability to find employment
Equal opportunity

Equal opportunity

AvePoint is a UK employer who has a full equal opportunity approach
Wellbeing

Wellbeing

Not applicable

Pricing

Price
£1.17 a user a month
Discount for educational organisations
Yes
Free trial available
Yes
Description of free trial
It is possible to trial the product for a limited period.
Link to free trial
https://www.avepointonlineservices.com/services Please contact Sales_UK@AvePoint.com to intitate a trial.

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at salesuk@avepoint.com. Tell them what format you need. It will help if you say what assistive technology you use.