NC Protect
Dynamic document security for Microsoft 365. Controlled by policy.
Archtis NC Protect delivers dynamic, attribute-based access control and document security for Microsoft 365 environments — enforcing granular permissions, applying persistent protection policies, and restricting document actions in real time based on user identity, data classification, device posture, and environmental context. It is security that adapts to your data, not the other way around.
Enterprise
Grade Security
Product Overview
NC Protect
Microsoft 365 has become the productivity backbone for enterprises across Africa, yet its native security capabilities were not designed to meet the access control, classification, and protection requirements of regulated industries handling sensitive government, financial, legal, or healthcare data. Default permissions in SharePoint and Teams frequently expose documents to broader audiences than intended, classification labels are inconsistently applied by users, and there is no granular mechanism for restricting document actions — such as printing, downloading, or forwarding — based on who is accessing the document, from what device, or in what security context. Archtis NC Protect was built to fill these gaps without disrupting the user experience that makes Microsoft 365 valuable.
NC Protect operates through a policy engine that evaluates a rich set of attributes before granting access to any document: the user's identity and security clearance level, the document's classification and sensitivity label, the device from which access is being attempted, the user's location, the time of day, and any other contextual signals relevant to your organisation's security policy. Based on this evaluation, NC Protect can grant full access, apply read-only restrictions, disable download and print capabilities, apply dynamic watermarks, or block access entirely — all in real time and without requiring the user to navigate a separate security system. Policies are defined centrally and enforced automatically, eliminating the inconsistency of manual permission management.
For organisations in regulated African industries — government agencies handling classified information, banks managing customer financial data, law firms protecting client privilege — NC Protect provides a compelling combination of rigorous access control and operational practicality. It integrates natively with Microsoft 365's sensitivity labelling framework, enhancing rather than replacing existing investments in Microsoft Purview. Its detailed audit logging satisfies the access reporting requirements of frameworks such as POPIA, ISO 27001, and government security standards, providing a complete record of who accessed what document, when, from where, and what actions they performed.
Key Benefits
- 01
Eliminate over-permissive document access in Microsoft 365 with attribute-based policies that enforce least-privilege at the individual document and action level.
- 02
Achieve POPIA and ISO 27001 compliance for Microsoft 365 document access with automated, continuous enforcement and comprehensive audit logging.
- 03
Protect sensitive documents from insider threats and accidental disclosure without disrupting the Microsoft 365 user experience your organisation depends on.
Core Capabilities
What NC Protect Does
Attribute-Based Access Control
Enforce document permissions based on user identity, classification, device posture, location, and time — going far beyond role-based access control.
Dynamic Watermarking
Automatically apply user-specific visual watermarks to documents when accessed under restricted conditions, deterring and attributing unauthorised distribution.
Action-Level Restrictions
Granularly control document actions — print, download, copy, forward, screenshot — based on policy, preventing data leakage without blocking legitimate access.
Microsoft Purview Integration
Enhance Microsoft 365 sensitivity labelling with NC Protect's attribute-based engine, extending native Microsoft classification with richer policy enforcement capabilities.
Full Document Audit Trail
Capture a complete, tamper-proof record of every document access event, action taken, and policy applied — meeting POPIA, ISO 27001, and government audit requirements.
Zero-Trust Document Access
Apply contextual, never-trust-always-verify access decisions to every document interaction, ensuring that legitimate credentials alone are insufficient for sensitive data access.
Real-World Applications
Industry Use Cases
See how organisations across sectors are deploying NC Protect to solve their most critical security challenges.
Government & Public Sector
A government ministry uses NC Protect to enforce classified document access controls in Microsoft 365, ensuring that only users with the appropriate security clearance can open CONFIDENTIAL and SECRET documents — with all access logged for security review.
Legal & Professional Services
A law firm applies NC Protect policies to automatically restrict client matter documents to the specific legal team assigned to each matter, preventing accidental disclosure during firm-wide SharePoint searches.
Financial Services
A bank uses dynamic watermarking and print restrictions on customer financial statements shared through Teams, reducing the risk of document leakage while maintaining the collaborative workflows its relationship managers depend on.
Healthcare
A hospital group applies NC Protect to patient records in SharePoint, ensuring that clinical staff can access records for patients under their care but cannot download or print records for patients outside their defined scope of care.
Explore Further
Related Products
NC Encrypt
Persistent encryption that travels with your data. Everywhere.
Learn MorePK Discovery
Find every piece of sensitive data. Know exactly where it lives.
Learn MorePK Encryption
Data-centric encryption. Protection that moves with your files.
Learn MoreGet Started
Ready to implement
NC Protect?
Our certified Archtis specialists will assess your environment, design a deployment architecture, and provide an implementation roadmap tailored to your organisation's unique requirements.