Skip to content

How it works

Three simple lanes. One immutable safety net.

CloudOnBox sits quietly beneath Microsoft 365. It protects every change, tiers cold data out of expensive SharePoint, and lets anyone restore in seconds — while your file bytes only ever stream through, never stored by NewTurn.

PROTECT
01

Every change, copied and locked — within minutes

  • The moment a file changes in a protected SharePoint site or OneDrive, CloudOnBox is notified by Microsoft Graph.
  • The new version streams straight through our engine — encrypted in memory — into immutable storage. The bytes are never written to a disk we hold.
  • Object-Lock retention is stamped on write, so the copy cannot be altered or deleted before its retention expires.
ARCHIVE
02

Cold files move out of SharePoint — a stub stays behind

  • Policies you set (age, size, path, sensitivity label) decide what counts as cold.
  • Once a file is safely stored and hash-verified, its SharePoint copy is replaced with a lightweight clickable stub that keeps its name, metadata and permissions.
  • Users still see the file where they expect it; a click brings it back. Your SharePoint storage bill shrinks.
RESTORE
03

Bring anything back — in two clicks, verified

  • Anyone with the right to write to the destination can restore a file, a version, or a whole site at a point in time.
  • Every restore is checked against the hash recorded when the file was protected, so you get back exactly what was stored.
  • It happens where people already work — inside Teams, inside SharePoint, or in the web portal. No IT ticket.

What makes it trustworthy

Bytes stream through

File content is never persisted on infrastructure NewTurn controls — only encrypted, in transit, on its way to your storage.

Immutable on write

Object-Lock retention means no one — attacker, admin, or NewTurn — can delete a copy before it expires.

Verified on restore

Every restored file is checked against its original SHA-256 hash.

Least privilege

Access is scoped with Sites.Selected — only the sites and drives you explicitly grant.

Put an immutable safety net beneath your Microsoft 365.

See CloudOnBox protect a real tenant in a 30-minute demo — no infrastructure, no commitment.

One admin consent · nothing installed · restore in two clicks