SWITCH FROM MICROSOFT 365 DATA CONTROLS
Microsoft 365 data controls to Calisto Sovereign
Sovereign is where a business decides where its data lives and who holds its keys: its own database, storage and models in any country, its own key, company sign-in from its directory, one Activity log that cannot be altered, and its customers’ data requests reviewed before anything is erased.
Feature by feature
Calisto Sovereign beside Microsoft 365
- 5 In both
- 1 Only in Microsoft 365
| 6 features | Calisto Sovereign | Microsoft 365 |
|---|---|---|
| Where Data Lives | ||
| Choose Where Data Is StoredCalisto: its application servers and default database and storage are in the European Union, and a business connects its own PostgreSQL, S3-compatible storage and model providers in any country, from its first day or by a move.Checked Nov 8, 2026Source | Yes | Yes |
| Keys | ||
| Encryption Under Your Own KeyCalisto: your business’s stored secrets (connection details, provider keys, tokens) are sealed under data keys wrapped by a key in your own key service, OpenBao or Vault Transit, OVHcloud KMS or Scaleway Key Manager; revoking it locks Calisto out of everything sealed under it. With your own database and storage, your records and files rest under your own provider’s encryption.Checked Nov 8, 2026Source | Yes | Yes |
| Sign-In | ||
| Single Sign-OnCalisto: OpenID Connect or SAML sign-in, for your business or a client company, each email domain proven by a TXT record in its DNS, in Sovereign’s Sign-In and every Core app’s Settings.Checked Nov 8, 2026Source | Yes | Yes |
| Records | ||
| Admin Activity LogCalisto: one Activity log of custody changes, access to walled matters and personal data, client money, exports and requests, each entry chained to the one before it and verified daily.Checked Nov 8, 2026Source | Yes | Yes |
| Export Your DataCalisto: Export Everything writes every record, the list of your files and the head of your Activity log into your own storage, whenever you ask.Checked Nov 8, 2026Source | Yes | Yes |
| Gaps | ||
| Data Loss PreventionCalisto does not scan what people share for sensitive content or block it.Checked Nov 8, 2026Source | No | Yes |
What moves
Bringing your data from Microsoft 365
Your data is read in your own browser and sent to your Calisto account. Calisto never sees your login for the old system.
Pulled live from your browser
Paste a key you create in Microsoft 365. Your browser reads your records and sends them to Calisto; the key never leaves your browser.
Contacts
Outlook contacts
Moving from Microsoft 365
Questions about switching
Can we keep our data in our own country?
Yes. Connect your own PostgreSQL and S3-compatible storage there, from your first day or by a move. Calisto’s application servers, and its default database and storage, stay in the European Union.
How are our customers’ erasure requests handled?
Every record you hold about the person is listed first, in every app. You approve each record or kind, and what the law requires you to keep is kept with their details replaced.
Learn more
Everything Calisto does here
The pages behind this comparison: the sector, the apps and the guides.