Contact sales Log in
Security and data control

Your documents stay in SharePoint, inside your network

BoldDocServer adds a browser editor without adding a new place where documents live. It runs on your servers, uses HTTPS for every connection and follows SharePoint permissions for every user.

Security overview: SharePoint Server, your users, BoldDocServer and your configuration all sit inside your network, connected over HTTPS, and documents stay in SharePoint.YOUR NETWORKDocuments stayin SharePointSharePoint ServerStorage, permissions, versionsYour usersSign in to SharePoint as usualBoldDocServerWindows container you runYour configurationEndpoint, certificates, secretsHTTPSHTTPSHTTPS
Data flow

Follow a document through BoldDocServer

Where a file is, and who controls it, at every step of an editing session.

  1. 1Stored

    In your SharePoint library, under your permissions.

  2. 2Requested

    SharePoint issues an access token for one user and one file.

  3. 3In transit

    Over HTTPS between SharePoint, BoldDocServer and the browser.

  4. 4Edited

    In a BoldDocServer container on servers you manage.

  5. 5Saved

    Back to the same file in SharePoint, which keeps the version.

Security model

Who controls what

Every part of the setup stays under your control. Syncfusion supplies the software; you run it.

BoldDocServer security model
AreaHow it worksControlled by
Document storageDocuments stay in SharePoint libraries. BoldDocServer reads and writes them through WOPI.Your SharePoint administrators
AccessSharePoint permissions decide who can view or edit. Each session uses an access token for one user and one file.Your SharePoint administrators
Encryption in transitHTTPS for every connection, with your certificates.Your IT team
HostingA Windows container on Windows Server, inside your network. It can sit behind a reverse proxy.Your IT team
Configuration and secretsSupplied at deployment time, not built into the image.Your IT team
UpdatesVersioned images. You decide when to move to a new version.Your IT team
SOC 2GDPRBoldDocServer is developed by Syncfusion, a SOC 2 and GDPR compliant company. Read about Syncfusion security.
Security review

Questions your security team will ask

Does BoldDocServer store our documents?

No. Documents are stored in SharePoint. BoldDocServer reads a file through WOPI while it is open and writes changes back to the same file. The documentation describes how files are handled during a session.

Who can open a document in BoldDocServer?

Only people SharePoint allows. SharePoint checks permissions and issues an access token for that user and that file, and BoldDocServer works within what the token allows.

Is traffic encrypted?

Yes. In production, HTTPS protects every connection between SharePoint, your users and BoldDocServer, including document content and WOPI requests.

Where does BoldDocServer run?

As a Windows container on Windows Server in your own infrastructure, next to your SharePoint farm. It can run behind a reverse proxy where your architecture supports it.

How are certificates and secrets handled?

They are supplied at deployment time and are not built into the image, so the same versioned image runs from test to production.

Is Syncfusion SOC 2 and GDPR compliant?

Yes. BoldDocServer is developed by Syncfusion, a SOC 2 and GDPR compliant company. Read about Syncfusion security.

Try BoldDocServer free for 30 days

Keep SharePoint, give your users browser editing back, and be ready before Office Online Server support ends on December 31, 2026.