Word, Excel, and email are copied to a throwaway name on one SharePoint site, turned into a PDF by Office, and deleted there. Preview streams the PDF that was stored.
Ask about a Word or Excel file and the price or clause can come back different from the preview and from the file someone has open. Give the AI, the preview, and search one PDF to share, and keep the original as the download.
A company login becomes a person and a library list, and every document request checks that list before a file opens.
The document system decides which library each signed-in person may open, and it checks that decision on every request.
The app signs in with one Azure credential, and settings hold account names and endpoints, with one certificate left for the tenant that credential can’t reach.
The system that reads your documents should sign in as itself, not with a password pasted into config.