Solutions · By capability

FOI on SharePoint: build it, or run it?

If you're researching how to build FOI request tracking in SharePoint, your instinct is right — SharePoint is exactly where this work belongs. The question is whether your team should spend the next year building the hard parts, or deploy them in an afternoon.

Start Free Trial Request a Demo

Building FOI request tracking in SharePoint is a completely rational instinct: your records already live there, your users already work there, and a list with views and alerts covers the visible part of the job. Plenty of offices have built exactly that. The trouble starts with the invisible part — the statutory machinery a list can't carry.

Statutory deadline math on business-day calendars with extensions, holds, and deemed-refusal consequences; redaction with exemption tagging that survives a commissioner's review; a PII firewall so custodians never see requestor identity; digital attestations for search completeness; consultations with their own clocks; fee handling; statistical reports in the formats your oversight body requires; and an audit trail that proves itself. Each of these is months of build — SharePoint lists, Power Automate flows, custom code — and worse, each changes when legislation does. The build is a project; the maintenance is a career.

AccessPoint is the third option the build-vs-buy framing misses: a purpose-built FOI and privacy platform that runs on the SharePoint and Teams you'd have built on. It installs as a SharePoint web part with a Teams app, its backend deploys into your own tenant's Azure subscription, records collect straight from your tenant — and there's no Power Platform or Dataverse licensing anywhere in the picture. You keep everything that made building in SharePoint attractive, and skip the year of building.

The parts a SharePoint list can't carry

If you do build it yourself, this is the honest scope of the hard 20% — budget for it before you start.

Statutory deadline engine Business-day calendars per statute, extension rules with legal bases, clock pauses for fees and clarifications, and deemed refusal recorded automatically. Calculated columns won't get you there.
Redaction with legal authority Line-level severance where every mark carries its exemption — primary and fall-backs — producing a defensible manifest. This alone is why offices keep desktop redaction tools.
The PII firewall Custodians and contributors must work without seeing who asked. SharePoint permissions can hide a column; they can't run a workflow around one.
Attestations & audit Search certifications captured against the record, and an append-only, tamper-evident ledger — because 'modified by, modified date' is not evidence.
Statutory reporting Your oversight body's statistical formats, generated from case data — rebuilt every time the report or the statute changes.
The maintenance career Legislation amends, calendars change, the builder gets promoted. Whoever owns the flows owns them forever.

What you get on day one instead

Everything the DIY build was reaching for — running on your own SharePoint, Teams, and Azure.

Native to your tenant

A SharePoint web part and Teams app over an Azure backend deployed from a one-click Bicep/ARM template into your own tenant's subscription. Your data never leaves your environment.

Records from where they live

Search SharePoint, OneDrive, and Outlook and attach records straight to a request — plus Teams chats, OneNote pages, calendars, and Copilot interaction history.

Your statute, preconfigured

A jurisdiction pack seeds deadlines, exemption catalogues, fee rules, letter templates, and report formats for your regime — 106 packs and counting, adjustable, never a lock-in.

The deadline engine, done

Computed due dates, extensions, holds, deemed refusal, and an abandonment workflow — the exact machinery the DIY build stalls on.

The redaction studio, done

Browser-native severance with exemption tagging, find-and-redact, live patterns on arriving documents, and optional AI-proposed redactions into human review.

Room the list never had

PIAs, AIAs, breach response, complaints, and a privacy risk register on the same platform — the mandate beyond requests that no one builds in a list.

The economics

"Free" is the most expensive option

A DIY build costs its construction, its maintenance, and its legal risk — a missed statutory deadline or an indefensible redaction costs more than software ever will. AccessPoint's price is public and flat.

Flat annual pricing USD $2,990 / $7,990 / $14,990 by organization size, published on the site, no per-user fees — with a 30-day free trial.
Azure costs, transparent Typically around $175/month in your own tenant's subscription, billed by Microsoft at cost — you control the sizing.
No Power Platform tax No Power Apps, Power Automate premium, or Dataverse licensing anywhere in the architecture.

Go deeper

Compare: build vs. buy vs. legacy AccessPoint vs. legacy FOI tools, privacy suites, and manual tracking — the full chart. Microsoft 365 privacy management What 'native to your tenant' means architecturally — the deeper page. FOI request management The full request lifecycle, capability by capability. For CIOs & M365 leaders The architecture and governance case for the team that would own the DIY build. Already built something? Migrate it Bring your SharePoint list's history in with a guided, validated import. Estimate your ROI Hours saved vs. build-and-maintain — run your own numbers.

SharePoint FOI Request Management Questions

Can you build FOI request tracking in SharePoint?
Yes — a SharePoint list with views, alerts, and some Power Automate flows can log requests, assign owners, and remind people about dates, and for a very low-volume office that may genuinely be enough. What a list can't carry is the statutory machinery: business-day deadline math with extensions and deemed refusal, redaction with exemption tagging, a PII firewall between custodians and requestor identity, attestations, statutory report formats, and a tamper-evident audit trail. Those are months of custom build each, and they change when legislation does.

Why is AccessPoint better than building it ourselves in SharePoint?
It's the same architecture you'd build toward — SharePoint and Teams interface, your own Azure backend, your own tenant — with the hard 20% already engineered: the deadline engine, the redaction studio, the PII firewall, attestations, the hash-chained audit ledger, and jurisdiction packs that keep pace with legislation. It deploys in an afternoon, costs a flat published rate, and needs no Power Platform licensing. Your team keeps the SharePoint-native experience and loses the year of building and the forever of maintaining.

We already built a SharePoint FOI tracker. Can we move off it?
Cleanly. Export your list to Excel — it already is a spreadsheet, structurally — and map it into AccessPoint's tenant-generated import template. Your request numbers persist as legacy references, requestor contacts import alongside, documents stage through your own Azure storage, and everything validates per row before import. The history your tracker accumulated becomes searchable, reportable case data.

Does AccessPoint use Power Apps or Dataverse?
No. AccessPoint is a SharePoint Framework web part and Teams app running against an Azure App Service, Azure SQL, and Blob storage backend in your own tenant's subscription — deployed from a Bicep/ARM template. There is no Power Platform or Dataverse dependency, and no premium connector licensing to carry.

Will it feel like SharePoint to our users?
It lives where they already work: opened from a SharePoint page or a Teams tab, authenticated by their existing Entra ID sign-in, with Teams activity-feed notifications deep-linking back to the record. There's no separate portal, password, or vendor domain — which is exactly the adoption argument that made building in SharePoint attractive in the first place.

Keep the SharePoint. Skip the Year of Building.

Try AccessPoint free for 30 days in your own Microsoft 365 tenant — live in an afternoon, configured for your statute.

Start Free Trial