Your data

SiteCabin is built so your firm keeps its own records. This page is for you and for whoever looks after your IT.

Your files stay in your own SharePoint

Photos, signed documents, certificates and the timesheet and job spreadsheets save to a SiteCabin site inside your own Microsoft 365 SharePoint. They are your files from day one. You can open, share and back them up like any other file in SharePoint.

SiteCabin sees one SharePoint site and nothing else

When you set up, SiteCabin makes a new site called SiteCabin in your SharePoint and is given access to that one site only, using Microsoft’s Sites.Selected permission. It can’t see your other SharePoint sites, your Teams files or anyone’s OneDrive.

Your Microsoft admin approves this on Microsoft’s own screens. There are two approvals: SiteCabin itself, and a small helper called SiteCabin Setup that is used once, while your admin is signed in, to make the site. SiteCabin Setup can be removed as soon as the site is made.

Email goes from one mailbox you choose

SiteCabin sends reminders, approvals, certificates and calendar invitations from one office mailbox that your admin connects. We suggest one made for the job, such as app@yourfirm. SiteCabin uses that mailbox and reaches nothing else in your Microsoft 365. If the mailbox stops working, your admins are told.

Signing in

Everyone signs in with their Microsoft work account. SiteCabin never sees or stores passwords, and your own Microsoft sign-in rules, such as two-factor sign-in, apply as normal. Site staff don’t need a paid Microsoft licence: a free account in your Microsoft 365 is enough.

What SiteCabin itself holds

The records that make the app work are held in SiteCabin’s own database: who works for you, timesheet entries, holiday requests, signatures and the history of who did what. The app and its database both run in London.

Every firm’s records are kept apart by the database itself, so one firm can never see another’s.

The companies that help us run SiteCabin are:

• Vercel runs the app, in London.
• Neon runs the database, in London.
• Stripe takes card payments. Card details go straight to Stripe and never reach SiteCabin.
• Microsoft provides sign-in, and your files stay in your own Microsoft 365.

No AI

SiteCabin has no AI built in, and your records are never sent to an AI service.

Backups and looking after it

The database keeps a running history, so it can be put back to an earlier point, and we test a full restore every month. The app is checked every few minutes, and we are told straight away if it stops answering. Every account we use to run SiteCabin is protected with two-factor sign-in.

Turning it off, and leaving

Your Microsoft admin can cut SiteCabin off at any time, in Microsoft Entra under Enterprise applications. Your SharePoint site and everything in it stay where they are.

If you close your account, you keep full use until the end of the period you have paid for. SiteCabin then becomes read-only, and 30 days later we delete everything we hold for your firm. We never touch your SharePoint site, so your files are still yours.

The paperwork

For your team’s and your customers’ records, Brightyard Ltd acts as your data processor. Drafts of our data processing agreement and terms of service are published now, and the final versions will be up before launch.