Questions and answers.

The as-built document of a Microsoft 365 tenant: a cover and summary, ten numbered sections (overview, identity and directory, sign-in and access, mail flow, mail protection, information protection, devices, collaboration, licensing, administrators; information protection and collaboration ship in the second release and print until then as a one-page note naming the module they need), six diagrams and an appendix with the change log, the list of what was not collected and a glossary. As pages in the portal, a PDF and a Word file.

No. Every read is a read, and the app has no write permission to your tenant’s data. The one directory write is the app registration of scheduled runs, which you review line by line before it is created and can remove at any time.

The portal, from your run. Each section has its own template filled with the facts of the run, so every number and sentence in the document comes from what was read. No external AI service is used and no customer data is sent to one.

The document says so. A part the sign-in or a missing module could not read is printed as a note with fixed wording that names what was not collected and what it needs, and the appendix lists every such note. The numbering of the sections never changes.

Yes, in Word. The Word file carries the same content as the PDF, with styles and a contents field, so an MSP can edit it into its own binder. You can also add notes in the portal, which print under their section in the next document.

The difference between your two newest documents: items added, removed and changed, by section. It closes the document as an appendix. With the One-time plan it appears when you run a second time within the 30 days; with Watch and MSP, every month.

Watch and MSP. They run the app once a month on a computer of yours and mail your team that the new document is ready, with the number of changes in the subject. The Preview and the One-time plan document when you run the app yourself.

Only where your plan and your workspace’s conceal-names switch allow. Counts and settings are always shown; names of users are not needed to read the document.

No. We hold no password, token, secret or certificate for any tenant. The app on your computer does the work, signed in as you, and a scheduled run signs in with a certificate whose private key never leaves your computer.

Mail, files, messages, sign-in logs and the value of any secret. It reads settings, policies and counts, and the document describes them.

A Windows 10 or Windows 11 computer, 64-bit, and a Microsoft 365 administrator account who can grant the read permissions once. The Exchange Online PowerShell module is needed for the mail sections. For scheduled runs, a computer that is on, with the account that set them up signed in.

Yes. Every workspace starts as the Preview: one tenant, up to 2 runs, the summary, section 1 in full, and the headline tables and diagrams of the other sections, with a PDF that carries a Preview band. No card needed.

Online. An owner of the workspace chooses the plan and pays on the secure payment page of Stripe, our payment provider; card numbers are handled by Stripe and never reach the portal. The plan switches on as soon as the payment completes.

Yes. If the app did not complete a run of a supported tenant, you are refunded within 14 days of paying. Write to support@glacierpointtech.com with your workspace’s name.

Yes. The MSP plan holds every tenant in one workspace, with a tenant table, your cover and logo on every document and Word export, for $149 a month plus $19 a month per tenant.