Your tenant. Your data. Your control.
Kybera IMpact runs inside your own Microsoft 365 and Azure environment, under your policies and your administrators. Kybera never receives your data, so there is nothing of yours for us to lose.
Nothing leaves your environment.
Runs entirely in your tenant
Kybera IMpact installs in your own Microsoft 365 tenant and Azure subscription. There is no Kybera-hosted service, now or later.
Your data stays in Canada
IMpact’s Azure components run in Canadian regions, and your content stays wherever your Microsoft 365 tenant already keeps it.
It never calls home
No telemetry, no usage tracking and no update checks. Even the licence is verified without contacting Kybera.
Kybera has no access
We cannot see your Teams, sites, content or people. Nothing reaches us unless your administrator chooses to send it.
Secure by design, not by add-on.
No passwords or secrets to manage
IMpact signs in with an Azure managed identity, so there are no stored credentials to rotate, leak or expire.
Nothing exposed to the internet
Its background service accepts no inbound connections from the internet, so there is no public endpoint to attack.
Roles from your own groups
Who can request, approve and administer is decided by security groups in your own Microsoft Entra ID.
Email from a mailbox you choose
Notifications are sent from one mailbox your organisation names, and IMpact can send from that mailbox only.
A full history
Every request, approval and change is recorded with who did it and when, so you can always answer “who changed this?”
It never deletes your Teams or sites
IMpact creates and aligns workspaces. It does not delete them.
Your policies still apply.
- Your administrators decide how long IMpact keeps its records.
- Your Microsoft Purview retention, sensitivity and compliance policies continue to apply to everything IMpact creates.
- When you need support, your administrator decides what to share. Diagnostic summaries leave out names, email addresses and document content.
- No premium Microsoft licences and no third-party services to assess beyond Microsoft itself.
We make assessment easy.
During your evaluation, we can walk your security and privacy teams through the architecture, the permissions IMpact needs and why, and how it is installed and updated.
To report a security concern, email support@kybera.ca. Read our privacy policy for how we handle personal information.
Bring your security questions.
A one-hour demonstration of Kybera IMpact, with time for your security and privacy teams.