AboutExpertiseWorkR&DBlogToolsStartContact
Writing

Notes from the field.

What we learn moving organisations onto the Microsoft cloud. Method, not opinion.

AI & agents

Can your AI assistant read documents the user cannot see?

A badly built RAG searches with the application's identity, not the asker's, and the assistant answers with what the person should not see. The fix is not a filter someone can forget to write: it is passing the user's token and letting Azure AI Search enforce permissions inside the engine.

·7 min read
Governance & security

A cookie banner you can prove, with Azure Tables and Functions

The banner you copy from a vendor can itself be a tracker. Build your own instead, with no third parties, and the hard part turns out not to be the banner: it is keeping the proof that the person consented. Here is all of it, from the browser to the Azure Table, step by step.

·8 min read
Development & automation

Sending email from an application, without a single password

Microsoft turned off SMTP with a password. The answer is not to store a better secret: it is to store no secret at all. Managed identity, Microsoft Graph, and Mail.Send tied to a group of mailboxes. Here is the whole configuration, mistakes included.

·5 min read
Company

P7CO® EcoResupply: why a certification is worth more than a promise

We built a circular economy platform and took it all the way to the official register of Portugal's Environment Agency. The software is the easy part.

·3 min read
Migrations

Migrating SharePoint without stopping the business

The hard part of a migration is not moving files. It is that nobody stops working while they move.

·2 min read
AI & agents

What to put in order before switching Copilot on

Copilot does not create permission problems. It makes the ones already there findable, and you no longer need to know what you are looking for.

·2 min read