Security

At harmon.ie, we prioritize not only your data’s security but also its sovereignty. We take pride in our promise that your essential data remains strictly within the boundaries of your tenant and will never be trafficked, processed, or stored outside of these secure confines. By partnering with harmon.ie, you’re choosing a platform steadfast in its dedication to the highest levels of security, compliance, and data protection. Your trust is our responsibility, and we endeavor to uphold it every single day.

How we secure your data

Data security is more than just a component of information management at harmon.ie. Our approach to security has three key elements–design, standards, and best practices for application development. Let’s examine how these three elements combine to secure your data.

Designed from the ground up with your security in mind

Serverless Architecture

harmon.ie is a client-side application designed to integrate with your company's Microsoft 365 (M365) tenant or SharePoint on-premises system.
It operates entirely on the client side, meaning it does not rely on any harmon.ie SaaS, backend, or external servers. Instead, harmon.ie’s add-ins connect directly to your existing infrastructure, ensuring that data remains within your organization’s control without requiring external cloud services.

Information Stays on Your Tenant

The harmon.ie plugin resides exclusively within your Microsoft tenant or on-premises servers, so your emails, files, and data are protected by all the security precautions, practices, and technology already protecting your current Microsoft environment. That means there’s no risk of data leakage, theft, or manipulation because your data never leaves your premises. Even better, harmon.ie leverages your existing Microsoft environment permissions, for more seamless integration without additional steps to secure your emails and files.

M365 Admin Consent

harmon.ie users will be able to search SharePoint, OneDrive, and Teams, but only the sites and folders provisioned to them. Features in harmon.ie may require admin consent to ensure fully secure and compliant usage.

harmon.ie is proud to hold the following certifications:

✔ ISO 27001

✔ Microsoft AI Content Partner

✔ Microsoft 365 App Compliance program for new harmon.ie!

✔ Microsoft Trusted Gold Partner

ISO-27001 Certification

We are proudly ISO-27001 certified by the Standards Institution of Israel. ISO 27001 is an international certification, developed by the International Standards Organization – the gold standard in information security management. ISO 27001 details requirements for establishing, implementing, maintaining, and continually improving an information security management system (ISMS). harmon.ie applies these standards not just to our own internal operations, but also to the applications we develop. By choosing harmon.ie, you're partnering with a company that places the utmost importance on the confidentiality, integrity, and availability of your information.

Microsoft Preferred Content AI

harmon.ie also holds the Microsoft AI Content Partner certification. This certification is awarded by Microsoft to companies with proven success in high-impact scenarios helping customers from planning and advisory through the deployment and implementation of advanced content management solutions, including Microsoft SharePoint, SharePoint Premium, OneDrive, Purview, and others, such as Microsoft 365 Backup, and Microsoft 365 Archive.

Microsoft 365 Certification for New harmon.ie

In recognition of our security-forward approach, Microsoft has certified that the new harmon.ie add-in meets the rigorous standards of the Microsoft 365 App Compliance program. Before making this certification award, Microsoft vetted the new harmon.ie against controls from leading industry frameworks. Microsoft found the new harmon.ie to demonstrate the latest security and compliance practices to protect customer data. In addition to closely examining the code of the new harmon.ie, Microsoft also audits the processes and procedures used to develop the new harmon.ie, adding an additional layer of protection. With this certification, users can be assured that the new harmon.ie is GDPR compliant, does not perform any automated decision-making that could result in legal liability, does not collect data from minors, nor does it collect any sensitive categories of data.

Microsoft Trusted Gold Partner

harmon.ie is proud to be a trusted Microsoft Gold Partner. This designation means that Microsoft has determined that harmon.ie is committed to excellence in evolving Microsoft technologies, and focuses on delivering benefits to clients via Microsoft solutions. Microsoft Gold partners:
✔ Participate in Microsoft’s Customer Satisfaction Index
✔ Have a record of positive customer experiences from a specified number of customers
✔ Employ a specific number of workers with the relevant Microsoft exam-based certifications
✔ Stay up-to-date on the latest Microsoft and industry developments
✔ Perform well on regular reviews of customer service and competence service ratings

Best Practices

Best practices for the design and development of secure applications at harmon.ie include:

Principle of Least Privilege (POLP). This means that we designed harmon.ie’s access controls to ensure end users have the minimal needed rights for the applications, database, and infrastructure.
User access control. All users are limited to role-based controlled access (i.e. read, write, and modify) to information and applications accessed via harmon.ie, mirroring their Microsoft 365 rights.
No access for us. Because your data stays in your environment, no harmon.ie employees have direct access to your data and have no way to download private information under any circumstances.
Audit log. An audit log tracks user history, so you can always see who changed what and when.
Security policy. harmon.ie maintains a detailed security policy and updates it regularly.