Exchange Sync BridgeYour data is never stored.
It is translated and released.
Exchange Sync Bridge is a translator, not a storage service. Your calendar, contact, task, and mailbox data moves from your software vendor, through us for translation, and on to Microsoft 365. There is no copy left behind.
One Continuous Handoff
Every request follows the same path, in the same direction, over encrypted connections from end to end. There is no queue, no staging area, and no moment where your data sits waiting on our systems.
Your business software sends a request
Your existing application keeps using the Exchange Web Services (EWS) sync feature it already has. Nothing about the way it works changes.
We translate the request in memory
Exchange Sync Bridge converts the request into the format Microsoft 365 expects today, then passes it straight through. The content is handled in memory for the length of the request and is not written to disk.
Microsoft 365 answers directly
The response comes back through the same connection and is returned to your software in the format it already understands.
Nothing Is Stored On Our Systems
- No mailbox content. Calendar events, contacts, tasks, and mailbox data are not saved, archived, or backed up by Exchange Sync Bridge.
- No user passwords. Sign-in runs through Microsoft itself. We never see or store passwords for anyone in your organization.
- No shadow copies. There is no secondary database holding your synced records, and no export of your data to any third party.
- No content in support tickets. When you contact us, we work from connection details and error codes, not from the contents of your mailboxes.
Account Details, Not Your Data
To run your subscription we keep the small amount of information a service like this needs: your organization and billing contact details, your licensed mailbox count, your Microsoft 365 tenant identifier, and the connection settings issued to you at license redemption.
We also keep operational logs so we can tell you why a sync is not working. Each request is logged with its time, the mailbox address it was for, the folder type (calendar, contacts, or tasks), the result, and any error code. Logs are deleted automatically after 30 days. They are not a copy of the items being synced: subjects, bodies, attendees, and contact details are not logged.
To count licensed users, we keep a list of the mailbox addresses that have synced, with the date each was first and last seen, plus the sync bookmarks Microsoft 365 issues for each mailbox so the next sync only picks up changes.
Microsoft Stays In Control
- Your Microsoft 365 administrator grants consent through Microsoft's own approval screen. You can see exactly what is being requested before you agree to it.
- Access is granted with the credentials issued to your tenant. Your Connection URL, Client ID, Tenant ID, and Secret Value are yours alone and are shown to you once at redemption.
- Your administrator can revoke consent in Microsoft 365 at any time. When consent is removed, Exchange Sync Bridge stops being able to reach your data, immediately.
- Licenses are managed by you. Disable a user in the admin console and that mailbox stops syncing.
Can It Read Every Mailbox?
Microsoft's admin consent grants the app its permissions across your whole tenant. That is how Microsoft's application permissions for calendars, contacts, and tasks work, and it is the right question for your IT review to ask.
- One mailbox per request. Exchange Sync Bridge only acts on the mailbox your software names in each request. It does not browse, search, or sweep other mailboxes.
- Per-user off switch. Turn sync off for a user in the admin portal, and Exchange Sync Bridge stops passing that mailbox's requests to Microsoft 365.
- Revocable at any time. Your Microsoft 365 administrator can remove consent, which cuts off all access immediately.
- Microsoft's mailbox restrictions. Microsoft also offers ways to limit an app to specific mailboxes (Exchange Online RBAC for Applications, and the older Application Access Policies). We have not yet tested Exchange Sync Bridge with them, so we do not claim support. If your firm needs that restriction, tell us before you buy and we will work through it with your IT team.
Where It Runs, And What We'll Sign
- US hosting. Cloud Hosted runs on Amazon Web Services in the US East (N. Virginia) region. The service, its database, and its logs all live there.
- Confidentiality agreement. We will sign your firm's confidentiality agreement. Send it along with your security questionnaire.
Questions From Your IT Review?
Send us the questionnaire. We will answer it in plain language, without the certification theater.
Ask A Security Question