How SYAGA Audit protects your tenant, step by step.

We only read Read-only, within Microsoft's limits

SYAGA Audit only read your tenant's configuration: the audit is 99% read-only. The rights granted, however, are not always purely read-only: for Exchange administration, which the audit uses, the Microsoft screen will display “manage Exchange”, the least privilege available. An add-on (SharePoint all sites, Defender) that Microsoft does not allow to be reached through any read access: the narrowest it offers is of the “manage” type. This is not our limit, it is that of the Microsoft API. We offer it to you as an option, justified, and you decide. Even when a right would allow action, we only read: the operation takes place on your side, never on our servers, and you verify it yourself: the permissions on the consent screen, and the absence of any change attributed to our applications or to the scan account, among the event types re-read, in your Microsoft audit log (which records changes and only a few reads; some of the audit's reads may appear in it under the scan account, but none concerns an email or a file, which the audit does not open).

• Within the limits of the rights Microsoft allows to be granted for purely read-only access: even when a right would allow action on your tenant, we only read.
• No access to your emails, files or content - only the security settings.
• Your settings, accounts and data remain untouched.

Explicit, revocable consent Microsoft OAuth

Access is granted by your administrator via the consent screen official Microsoft, which lists the requested permissions. You remain in control at all times.

• No password is ever shared with us (Microsoft OAuth).
• The consent screen shows precisely which permissions are granted.
• Revocable in one click at any time from Entra ID (Azure AD).

No agent, no server-side agent No software

SYAGA Audit works entirely remotely, via the Microsoft API. Nothing to deploy on your side, no added attack surface on your network.

• A browser extension, with no software to install on the computer.
• No PowerShell script to run on the client side.
• No inbound connection to your network.

Sovereignty Hosting in Europe

The SYAGA Audit infrastructure is hosted in Europe. Your audit results remain subject to French and European law.

• Hosting in Europe, French and European law applicable.
• Designed to respect the principles of the GDPR (data minimisation, ephemerality).
• A sovereignty-oriented approach (NIS2, ANSSI).

Transparency Traceability

• You know what was read, and when.