Your content. Your destination. Under your control.
Sightline 365 is a desktop application that speaks directly to your Microsoft 365 tenant over Microsoft Graph and SharePoint APIs. There is no content proxy in the middle, no shared review portal, and no telemetry that ships the content of your searches back to us.
You choose where content goes
Copy to your chosen Microsoft 365 destination, or export a ZIP to your computer. Local archives contain downloaded content; follow your organisation's storage and sharing policies.
No third-party cloud
Content requests go directly from the reviewer's desktop to Graph and SharePoint. No Sightline content database, staging bucket or proxy. Licensing and website analytics are separate services described in our privacy policy.
Microsoft-native auth
Sign-in uses Microsoft OAuth 2.0. Your MFA and Conditional Access policies apply exactly as they do to Outlook or Teams. If your policy says no, Sightline can't either.
Where the bytes actually go.
The picture is simple: the reviewer's desktop app talks to Microsoft Graph, Microsoft Graph and SharePoint talk to your tenant. Copies go to your chosen Microsoft 365 destination; ZIP exports download content to your computer. There is no Sightline-hosted content proxy or storage in between.
Explicitly, so your IT team can tick the box.
Normal discovery and collection do not send files, emails or search results to a Sightline content store. Support receives only the reports or information you explicitly choose to share.
Graph requests go from your desktop directly to Microsoft. Nothing runs through a Sightline server first.
Routine licensing and usage reporting do not include your search terms. Opt-in detailed diagnostics can include queries and file metadata; review reports before choosing to send them to support.
No SPFx solution to deploy, no background service running in your tenant. Review permissions in the app; tenant consent policies may require your administrator's approval.
Microsoft consent, user permissions, MFA and Conditional Access constrain access. A downloaded archive is outside Microsoft 365; do not assume tenant DLP or label enforcement automatically follows a local ZIP.
No third-party content storage or shared review portal. Copies go to your chosen Microsoft 365 destination; ZIP exports are saved to your computer.
Read access first. Additional permissions only when needed.
Sightline 365 requests delegated Microsoft 365 permissions on behalf of the signed-in reviewer — never application-level permissions that would run without a human present. In practice that means the reviewer can only see what they could already see in Outlook, OneDrive, and SharePoint. Choose only the sources you need; selected Graph read sources share one approval request where possible. Search, preview and local ZIP export use source read access, with no tenant write permission. Destination copying, library management and indexed OneDrive search are separate explicit choices. Graph and SharePoint consent are separate resources. Your organisation's consent policy determines whether an administrator must approve a request.
Sign-in and read-only search
- User.Read · sign-in and the reviewer's own basic profile
- Sites.Read.All (Graph) and AllSites.Read (SharePoint) · discover SharePoint sites and search/download accessible SharePoint content
- Files.Read · basic search, preview and ZIP downloads in My OneDrive
- Mail.Read · search the mailbox the reviewer is signed in as
- My mailbox means the signed-in user's mailbox. Shared mailboxes and other users' OneDrives or mailboxes are not searched by these connections.
SharePoint may require separate Graph and native read approval; we do not assume one grant automatically covers both. Read access does not permit changing files or creating libraries. Basic OneDrive search uses a plain term, not KQL; indexed mode adds advanced query filters with a separate Files.Read.All opt-in.
Microsoft 365 copying (optional)
- Files.ReadWrite · copy to a folder in My OneDrive, only after explicit enablement
- AllSites.Write · SharePoint-native access for copying selected content from any source into an existing library. Destination browsing separately uses Sites.Read.All and AllSites.Read.
Creating libraries (optional)
AllSites.Manage · requested separately when creating a new SharePoint library or changing its schema. Column cloning starts unchecked. Write tests are manual and disclose an empty-file upload/delete before you confirm. This is not included in the initial search consent or ordinary copy into an existing library.
Content integrity is not legal certification.
The content ZIP contains downloaded files and full .eml messages. Collection ZIP reports add source-to-entry mappings, content SHA-256 hashes, search/selection context and explicit failures. The JSON collection manifest is unsigned. Hashes help compare bytes against a record, but neither the content nor an unsigned record is independently authenticated.
The separate Export evidence bundle signs copy-run records using a locally generated key and includes the public key for verification. It does not include collected documents. Verification establishes consistency with that key, not independently certified operator identity, source authenticity, a trusted timestamp or legal admissibility.
Search indexing, permissions, service limits and selection choices affect what is collected. These workflows do not prove exhaustive discovery or apply legal holds. Reports contain source identifiers and may contain review notes; protect them together with the downloaded content under your organisation's policies.
Ready for IT review.
Review permissions with your IT team. Discover for free, then start the collection trial when ready.