Questions and answers
Straight answers before you start.
Can't find your question? Ask us and we will answer within one working day.
What does ExpiryPoint do?
It gives every SharePoint document a review date and a named reviewer. When a review is due, the reviewer works through their files in a quick review deck and decides: still current, needs an update, or ready to retire. ExpiryPoint keeps the dates, sends the reminders, logs every decision and reports on it all.
Does reviewing change our documents?
No. A review never changes the document. The decision and the next review date are kept in ExpiryPoint's own hidden lists on your site, so the file's Modified date and version history stay as they were. The only exception is retirement: if a site owner switches on moving, labelling or recycling retired files, an approver or owner carries that out as a separate step.
Is ExpiryPoint a compliance tool?
It is a review tool. No tool can make an organisation compliant, and ExpiryPoint does not try. It gives every document an owner and a review date, records each decision with who and when, and reports completion and overdue reviews. That helps evidence periodic review, for example the policy reviews ISO 27001 Annex A 5.1 asks for. What counts as enough evidence is for you and your auditor to decide.
Does anything leave our Microsoft 365 tenant?
Your files, review dates and decision log never do, and reminder emails go from people's own mailboxes through Microsoft 365, not through us. Once a day ExpiryPoint tells Apps 365 your tenant ID, the site address, the app version and the licence state, so we can support your licence; never names, keys or content. A site owner can switch that off, and ExpiryPoint works the same without it.
Does it need admin consent or Microsoft Graph permissions?
No admin consent is needed to use ExpiryPoint, and no Microsoft Graph permission is required. It runs in the browser through SharePoint with the signed-in person's own permissions, with no Azure app registration. One optional permission (Microsoft Graph, Mail.Send, delegated) switches on email: a SharePoint administrator approves it in the SharePoint admin centre under Advanced, API access. Without it, everything else works, and people get a pre-filled email to send themselves.
How is the next review date worked out?
From the rule that matches the file: the last review plus the rule's interval (30 days, 90 days, 6 months, 12 months, or a custom number of days or months). A file that has never been reviewed counts from its last modified date. A reviewer who marks a file Still current can choose a different date for that file.
Does it know whether anyone still reads a file?
Not reliably, and it never pretends to. SharePoint does not give apps a dependable last-opened date, so ExpiryPoint works from review dates and when a file was last modified. Where it shows views, they are views as recorded by search, which are approximate and can lag.
How do reminders work?
Each site chooses its reminder days, for example 14, 7 and 1 days before a review, then every 7 days while it is overdue. Once a SharePoint administrator approves ExpiryPoint's optional Mail.Send permission, emails are sent through Microsoft Graph from the signed-in person's own mailbox, when a site owner chooses Send reminders now or, if switched on, once a day when an owner opens the dashboard. Without that approval, ExpiryPoint opens a pre-filled email to send yourself. Reminders on a fixed schedule and Teams messages run through your own Power Automate flow over the review register; our recipe shows how.
Can we use it in Microsoft Teams?
Yes. ExpiryPoint runs as a Teams personal app, so reviewers can open their reviews in Teams, and as a tab in a channel. Your administrator makes it available in Teams from the app catalog.
What happens to a retired file?
By default, Mark for retirement only marks it. A site owner can switch on moving retired files to a folder, applying a retention label your administrator names, or sending them to the site's recycle bin; an approver or owner then carries that out. ExpiryPoint never deletes a file permanently.
What can I see without a licence?
A free snapshot of how old the site's documents are, by when they were last modified. A licence or a 14-day trial turns on review dates, the review deck, reminders, rules, approvals, the decision log and reports.
How is it licensed?
By the year, priced by how much it covers: one site, one site collection, or every site in your tenant, with a separate level for organisations over 1,000 users. Every level includes every feature. Licence keys come from Apps 365 and are checked on your device; there is no licence server for the app to call.
How do I buy a licence?
Choose a level on the pricing page and tell us where it should work. We send a quote and the next steps within one working day, and your key as soon as payment is through. Purchase orders are welcome.
Is ExpiryPoint on Microsoft Marketplace?
Not yet. Until it is listed there, get ExpiryPoint from this site. Licence keys and trials work the same wherever you get it.
Where is the review data kept?
In hidden lists on your own SharePoint site: the review records, the rules and settings, and the decision log. Hidden means out of the site navigation; it is not a security boundary, and the lists follow your site's own permissions.
How does it fit with ExposurePoint?
ExposurePoint shows who can see a site's content; ExpiryPoint asks whether that content is still true. Who can see it? Is it still true? Each works on its own, and they sit side by side on the same SharePoint page.