Your clients' information matters. Here's how Trovve handles it.
See what Trovve can access, where your information goes, and how your firm stays in control.
Where does your information go?
Trovve works with Microsoft 365 to organize your emails, files, and case work. Here's what happens.
Diagram: emails, attachments and documents start in Microsoft 365. With approved access, Trovve reads relevant information to organize work. Original files stay in your SharePoint or OneDrive storage. Trovve work records such as tasks and client records are stored in Microsoft Azure.
Email: read from Microsoft 365, organized by Trovve, and the resulting task is stored in Azure. File: the original stays in your SharePoint or OneDrive. Task: Trovve work records are stored in Azure. Some features also process information to prepare AI suggestions. See How Trovve uses AI below.
What happens when Trovve connects to Outlook?
Trovve looks for work your team needs to organize. You can review what it finds.
Once your firm starts using Trovve, approved email rules can help organize new work automatically.
Your firm stays in control.
Trovve works with your Microsoft 365 account and your firm's access settings.
AI helps organize work. Your team makes the decisions.
Trovve uses AI to help understand incoming communication, find related case work, and prepare suggested actions or replies.
The technical details, when you need them.
Review how Trovve connects to Microsoft 365, handles information, and manages access.
Microsoft 365 permissions
Trovve connects to Microsoft 365 through Microsoft Graph. The access requested depends on the features your firm uses.
| Microsoft 365 area | Access | What Trovve uses it for |
|---|---|---|
| User profiles | Read | Show team member names, photos, and email addresses |
| Outlook calendar | Read | Show upcoming meetings in My Day |
| Outlook mail | Read, when email features are turned on | Find and organize work from incoming emails |
| SharePoint and OneDrive | Read and write | Browse, link, and save case files and folders |
| Microsoft Teams | Read | Run Trovve as a Teams app |
Your administrator can see the exact permissions Trovve has been granted in Microsoft Entra under Enterprise applications.
Storage and encryption
Your original SharePoint and OneDrive documents remain in Microsoft 365. Trovve stores its own work records using Microsoft Azure.
Connections to Trovve and between Trovve and Microsoft 365 are encrypted in transit, and stored Trovve data is encrypted at rest.
AI and service providers
Some Trovve features rely on cloud services to process information and provide the features your firm uses.
- Microsoft Azure — application infrastructure, hosting, and storage of Trovve work records
- Microsoft 365 / Microsoft Graph — the connection to your email, calendar, files, and users
- Stripe — payment processing; Trovve does not store card details
- Microsoft Power Automate — only where automation workflows are configured
- Twilio — only where SMS reminders are turned on
- Microsoft Azure OpenAI — AI features (see below)
- OpenAI models are accessed through Microsoft's Azure-hosted service.
- Prompts and responses are not made available to OpenAI through this service.
- Microsoft does not use them to train generative AI foundation models without customer permission or instruction.
- Processing is governed by Microsoft's applicable enterprise data protection terms.
- Any temporary retention or abuse monitoring follows the Azure service configuration.
What happens if I cancel?
You can cancel your subscription. Access continues until the end of your paid period. After that, your Trovve workspace becomes read-only for a limited time before its records are deleted. Your original files in Microsoft 365 remain there.
You can ask us to delete your Trovve records sooner by emailing help@trovve.com. Removing Trovve's Microsoft permissions stops the connection but does not delete records already stored in Trovve.
Security practices
Trovve uses Microsoft Azure infrastructure and application security controls to help protect customer information.
- Sign-in through Microsoft Entra ID, including your organization's multi-factor authentication and conditional access policies
- Encrypted connections and encrypted storage
- Access tokens that expire and must be refreshed
- Code review before release and monitoring of third-party libraries for known vulnerabilities
Need more details?
Our team can help with questions about Trovve's Microsoft permissions, data handling, and security.
Ask a Security QuestionHave a question about your firm's information?
We're happy to explain how Trovve works with Microsoft 365 and answer questions from your IT team.
Ask a Security Question