How can we help?

Gridavera uses multiple layers of security:

• No passwords stored: sign-in uses Microsoft 365 single sign-on (Office SSO) for the plugin and Microsoft Entra ID Bearer JWT for the admin panel — Gridavera never sees or stores user passwords
• Role-based access control: users only see views and columns they are authorised to access
• Row-level filtering: dimension filters restrict which rows each user can see, enforced server-side via SharePoint CAML queries
• Column-level encryption: sensitive columns can be encrypted with AES-256-GCM, with keys held in Azure Key Vault, never written into app config, and supplied to the add-in only as a non-exportable handle
• Sheet protection: Excel cells are locked based on user permissions
• Permission verification: a SHA-256 permission hash is re-checked at submit time so mid-session permission changes can’t be exploited
• No long-lived secrets in the bundle: as of recent releases, the plugin webpack bundle ships zero API keys or secrets

Yes. Gridavera’s dimension filtering system ensures each user only sees rows matching their assigned filter values. For example, a regional manager might only see data for their region, while a global manager sees everything.

Yes. Column editability is controlled at three levels:

1. The column must be marked as editable in the configuration
2. The user must have Edit permission on the view
3. Optionally, the column can be restricted to users with a specific role

IsLocked allows you to protect specific rows from editing. Rows with IsLocked = TRUE are displayed in grey and cannot be modified by regular users. This is useful for locking closed periods or approved records. Users with the “Unlock” permission can override this protection.

Gridavera supports optional column-level encryption using AES-256-GCM. When enabled, data is encrypted before writing to SharePoint and decrypted when loaded into Excel. The encryption key is stored in Azure Key Vault and never exposed in plaintext.

No. When column encryption is enabled, the data stored in SharePoint is ciphertext. Even users with full SharePoint admin access cannot read encrypted field values without the Gridavera encryption key.