Permissions and Data Access
The suite requests no web API permissions. There are no Microsoft Graph scopes and no tenant-wide API permission approvals for an administrator to grant.
SharePoint permissions always apply
Every web part honors the viewer's own SharePoint permissions on the list or library it reads. Zenpo does not elevate, hide, or invent a permission system. If SharePoint says no, the web part says no.
A reader who loses access to a bound list sees an access message, not the content. Typical wording: You no longer have access to this list.
No web part uses Microsoft Graph. Org Chart and People Directory read a SharePoint list or a CSV file you control. All data access is SharePoint REST as the current user.
What the licensing service receives
The Zenpo licensing service is the suite's only non-Microsoft external application-service dependency. No SharePoint content is sent to it.
Zenpo sends only what is required to register, license, and validate the product. That can include the SharePoint domain or site URL, the product identifier, the signed-in user making the registration, organization details where registration requires them, and the site-collection user count. As with any web request, standard network metadata such as the source IP address may also reach the service infrastructure.
No telemetry or usage analytics are collected. No customer content leaves SharePoint.
Firewalled tenants
If the licensing service cannot be reached and nothing is cached, the part shows Unable to reach licensing server. That is a designed state, not a silent failure. See License Messages Explained.