# Microsoft SharePoint — Document Management (DMS)

Microsoft SharePoint by Microsoft Corporation holds a panel rating of 1.5/5 from 6 AI judges (category median 2/5), as of 2026-10-15. Provenance: Rest of world; sovereignty: not determined.

- Vendor: Microsoft Corporation (https://www.microsoft.com/de-de/microsoft-365/sharepoint)
- Category: [Document Management (DMS)](https://whats-best.ai/software/document-management.md)
- Provenance (editorial classification): Rest of world
- Canonical page: https://whats-best.ai/software/document-management/microsoft-sharepoint
- Alternatives: https://whats-best.ai/software/document-management/microsoft-sharepoint/alternatives ([markdown](https://whats-best.ai/software/document-management/microsoft-sharepoint/alternatives.md))
- Data as of: 2026-10-20 · evaluated 2026-10-15 · oldest source captured 2026-10-01

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Microsoft Corporation
- Headquarters: Not stated on the vendor’s pages as of 13 Oct 2026
- Data hosting: Not stated on the vendor’s pages as of 13 Oct 2026
- Free plan: Not stated on the vendor’s pages as of 13 Oct 2026

## The panel's verdict

SharePoint scores strongest as a public platform and weakest at document intake. Audit-proof archiving scores sit at 4 with no spread — compliant cold storage, retention with alerts and scheduled deletions, legal hold — though HIPAA, GDPR and SOX are the named regulations and we found no public information on GoBD. Document workflows scores run 4 to 6, carried by the developer pages: Graph REST APIs with SDKs, Teams bots and a browser playground. Capture and indexing sits at the floor, 1 to 2: the pages show document libraries and search, and we found no public information on scanning, OCR or reading XRechnung and ZUGFeRD. Sovereignty is the genuine split, 0 to 3 — the widest range — over weight, not findings: judges report the same facts, ownership with Microsoft Corporation in Redmond and EU customers contracting with Microsoft Ireland Operations Limited, and the same absence of public information on storage locations, subprocessors, or where Copilot's AI processing touches document content, and differ on how much that should weigh. Pricing transparency scores 2 to 3, with no price figure in any capture.

**Speaks for it:**
- audit-proof archiving scores sit at 4 with no spread, on compliant cold storage with retention alerts, scheduled deletions, legal hold and searchable archives
- document workflows scores run 4 to 6 — the 6 from the IT Integrator — on a public developer platform of Graph REST APIs, SDKs, Teams bots and Graph Explorer in the browser
- versioning and permissions scores of 3 to 4 rest on versioned document libraries with access control plus Microsoft Entra ID identity management
- search and portability scores of 3 to 4 reflect natural-language search in Copilot and Copilot Search over content that stays searchable when archived
- phone and web support runs 24/7 in all three plans, which cover 1–300 users with 1 TB of cloud storage per user

**Held against it:**
- capture and indexing scores fall to 1–2, and we found no public information on scanning, OCR, mailbox intake, or reading XRechnung and ZUGFeRD as structured data
- we found no public information on check-in and check-out, record-level permissions, or an audit log of reads, changes and exports
- we found no public information on GoBD, a Verfahrensdokumentation, an auditor's report, or how archived documents are made immutable, with HIPAA, GDPR and SOX the named regulations
- we found no public information on a documented bulk export of documents with their metadata, versions and audit trail, or on exit terms when a contract ends
- the plan comparison names three editions, 1–300 users and 1 TB per user, but we found no price figure in any capture, and agents require an Azure subscription priced by consumption

**Best for:**
- You have in-house developers and want to build document handling on a documented REST platform with SDKs, code samples and a developer program that may qualify for a free, renewable subscription with sample data
- You need cold storage for inactive content with legal hold, searchable archives and automated retention under HIPAA, GDPR or SOX
- You already run Microsoft 365 and want versioned document libraries, access control and natural-language search inside its bundle of more than ten apps

**Avoid if:**
- Your documents arrive on paper or as XRechnung and ZUGFeRD e-invoices and you need built-in capture, since the pages document storage and sync rather than intake
- Your archive must stand up to a German tax audit, where the pages name HIPAA, GDPR and SOX and we found no public information on GoBD or a Verfahrensdokumentation
- You must prove who read, changed or exported a specific record, where the documented access control covers libraries rather than records
- You need a computable price, or confirmed data residency and a subprocessor list, before you can sign

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price.

| Criterion | The GoBD Auditor | The Records Manager | The IT Integrator | The Mittelstand Owner | The Data Protection Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Capture, OCR & indexing | 1/5 | 0.5/5 | 0.5/5 | 1/5 | 1/5 | 0.5/5 |
| Versioning, permissions & audit trail | 2/5 | 1.5/5 | 2/5 | 2/5 | 2/5 | 1.5/5 |
| Audit-proof archiving & retention | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Document workflows & integrations | 2/5 | 2/5 | 3/5 | 2/5 | 2/5 | 2/5 |
| Search, retrieval & exit | 2/5 | 2/5 | 2/5 | 1.5/5 | 2/5 | 1.5/5 |
| European sovereignty | 1.5/5 | 1.5/5 | 1/5 | 0/5 | 1/5 | 1.5/5 |
| Pricing transparency | 1.5/5 | 1/5 | 1.5/5 | 1.5/5 | 1/5 | 1/5 |
| **Weighted verdict** | **2/5** | **1.5/5** | **2/5** | **1.5/5** | **1.5/5** | **1.5/5** |

### The judges

- **The GoBD Auditor** (v1.0): Has sat through tax audits on the company side and knows that "GoBD-konform" on a homepage proves nothing. Wants the auditor's Testat with its scope and date, archived documents that cannot change, retention per document type, and a Z3 export the tax office can read.
- **The Records Manager** (v1.0): Owns the filing plan and gets the call when a contract from 2019 cannot be found. Wants metadata that is set at capture rather than typed later, version history with restore, search that respects permissions, and a bulk export that keeps metadata and versions together.
- **The IT Integrator** (v1.0): Connects the DMS to the ERP, DATEV and Microsoft 365 and maintains it afterwards. Wants connectors with a stated scope rather than a logo wall, a documented API with webhooks, single sign-on, and a migration path in and out that does not depend on the vendor's services team.
- **The Mittelstand Owner** (v1.0): Runs a forty-person company and wants the paper out of the office and the invoices approved without chasing anyone. Reads for e-invoice intake, an approval workflow that works without a consultant, and a price for users, storage and modules before the partner visit, not after.
- **The Data Protection Officer** (v1.0): Knows the DMS ends up holding personnel files, health certificates and customer contracts in one place. Asks where the cloud edition stores them, which AI provider reads them during capture, who the subprocessors are, and how GDPR deletion is reconciled with retention duties.
- **The Skeptic** (v1.0): Has read "revisionssicher" on every DMS homepage and a Testat on almost none. Distrusts "AI-powered capture" without a validation step, "seamless SAP integration" without a scope, and "no vendor lock-in" from a vendor that documents no export — and treats "price on request from your partner" as an answer.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Ownership | Not determined | — | — |
| Data residency | Not determined | — | — |
| Subprocessors | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Bing removal form: yes [S3]
- CCPA: CCPA/CPRA applies to California state law; deletion requests and disclosure required [S7]
- Ftc act: FTC Act: data retained for a 'reasonable period' to fulfill its intended purpose [S7]
- GDPR: GDPR: personal data retained only as long as necessary for original purpose; EU scope [S7]
- Glba retention: GLBA: financial institutions retain records at least five years [S7]
- HIPAA retention: HIPAA: retain medical records and PHI at least six years [S7]
- Ip claims process: yes [S3]
- Osha retention: 5 · 30 [S7]
- Pipeda: PIPEDA applies to private-sector organizations across Canada [S7]
- Sox retention: SOX: retain financial and accounting records at least seven years [S7]

**Integrations**
- API: A Copilot connectors API is provided for building custom connections [S4]
- Bundle apps: Bookings · Planner · Forms · >10 [S1]
- Bundle apps standard: Microsoft Loop · Clipchamp · Bookings · Planner · Forms · >10 [S1]

**Legal**
- Applicability: Gilt für microsoft.com inkl. aller Subdomains und verlinkte Webseiten/Dienste [S3]
- Germany not provider: Microsoft Deutschland GmbH · no · no [S3]
- Provider: Microsoft Corporation · One Microsoft Way, Redmond, WA 98052-6399, USA · § 5 DDG [S3]
- Receiving agent juschg: Wittelsbacher Platz 1, 80333 München · Zustellungen der Bundeszentrale nach § 24b JuSchG · SKW Schwarz Rechtsanwälte [S3]
- Ubi: 600 413 485 [S3]
- Usk membership: Microsoft Ireland Operations Limited · Unterhaltungssoftware Selbstkontrolle [S3]

**Pricing**
- Business basic: no · 6.07 [S1]
- Business basic: annual · yes · 6.07 [S2]
- Business premium copilot: no · 27.73 [S1]
- Business premium copilot: annual · yes · 27.73 [S2]
- Business standard copilot: no · 20.36 [S1]
- Business standard copilot: annual · yes · 20.36 [S2]
- Cancellation: Microsoft 365 Admin Center · yes [S1]
- Cancellation refund: 7 · anytime via Microsoft 365 Admin Center [S2]
- Copilot business addon discount terms: Rabatt nur 01.07.2026–31.12.2026 für bestehende Business-Tarif-Kunden; Sonderpreis nur im ersten Jahr [S2]
- Copilot business addon requirement: 300 · yes [S2]
- Copilot chat included: yes · yes [S2]
- Free trial: yes · 1 · yes [S1]
- Free trial: yes · 1 · yes [S2]
- Identity limit: 300 [S1]
- Premium identity: Policy-based Identity & Access Management up to 300 users [S1]
- Refund policy: 7 · yes [S1]
- Storage: 1 [S1]
- Teams essentials: standalone · annual · yes · 3.5 [S2]

**Product**
- Access control: Ingestion and management of external items includes access to content [S4]
- Archive: Microsoft 365 Archive stores inactive data in SharePoint in cost-effective, compliant cold storage [S7]
- Archive purpose: Kostengünstige Langzeit-Cold-Storage-Archivierung inaktiver SharePoint-Inhalte [S6]
- Audio conferencing: free add-on · included (teams version) · free add-on [S2]
- Backup: Microsoft 365 Backup provides fast recovery and quick restoration of lost or corrupted data [S7]
- Bicep templates: yes [S5]
- Build steps: Choose data sources to ingest · Use the Copilot connectors API · Create the connection and configure search and activity settings · Define and register your schema, applying semantic labels and property attributes · Ingest and manage exter… [S4]
- Change notifications: Change notifications feature; example solution integrates with Azure Event Hubs [S5]
- Cloud storage: 1 · yes [S2]
- Code samples: yes [S5]
- Content discoverability: Surfaces external content alongside Microsoft 365 files, documents, and data [S4]
- Copilot chat agents azure: Azure subscription, consumption-based pricing [S2]
- Copilot grounding: Grounds Copilot responses in external work content and context [S4]
- Copilot studio chatbots: yes [S2]
- Defender for business: Business Premium · yes [S2]
- Desktop apps: Word · Excel · PowerPoint · OneNote · Access (PC only) [S2]
- Device limit: web and mobile apps only · 5 PCs/Macs, 5 tablets, 5 mobile devices [S2]
- Entra id: extended · free version [S2]
- Fluid framework integration: Real-time collaboration solution example uses Graph Toolkit and Fluid Framework [S5]
- Free developer subscription: Microsoft 365 Developer Program may qualify for free renewable developer subscription with sample data [S5]
- Graph explorer: Graph Explorer: try API in browser without code [S5]
- Graph integration: Brings external data into Microsoft Graph [S4]
- Graph toolkit controls: login · people picker · person card [S5]
- Intune: Intune Plan 1 · yes · Business Premium [S2]
- Legal hold archiving: Archivierung von Inhalten mit juristischer Aufbewahrung als FAQ vorhanden [S6]
- M365 copilot addon: add-on · yes [S2]
- Mail API automation: Mail API with change notifications for processing and responding to email messages, incl. shared mailbox responses [S5]
- Mailbox storage premium: 1.5 · 100 [S2]
- Mailbox storage standard basic: 50 · 100 [S2]
- Natural language search: Enhances knowledge layer for natural language search in Copilot and Copilot Search [S4]
- Policy automation: Policy enforcement can be automated with alerts and scheduled deletions [S7]
- Powershell automation: provision users · provision groups · provision Teams teams · generate M365 usage reports · send security alerts [S5]
- Premium features: Advanced device management, phishing/cyberattack threat protection, information protection [S1]
- Purpose: Copilot connectors bring external data into Microsoft Graph to make it available to Copilot and Microsoft Search experiences [S4]
- Purview: Business Premium · yes [S2]
- Regulations supported: Regulatory compliance support includes HIPAA, GDPR, SOX [S7]
- Retention integrates ecm dms: Data retention integrates with ECM and DMS systems [S7]
- Schema semantic labels: Schema registration supports semantic labels and property attributes [S4]
- Scope site file: Archivierung vollständiger Sites und einzelner Dateien als FAQ vorhanden [S6]
- Sdks available: yes [S5]
- Searchable archive: Durchsuchbarkeit archivierter Inhalte als FAQ vorhanden [S6]
- Sharepoint features: file-sharing policies, real-time co-authoring, communication & team sites, OneDrive/SharePoint file management, versioned document libraries with access control, offline files, Microsoft Lists [S2]
- Sharepoint integration: SharePoint in Microsoft 365 is integrated with Microsoft 365 Backup and Archive [S7]
- Sharepoint plan1: 1 · yes [S2]
- Sharepoint templates: SharePoint template catalog for pages and news posts [S2]
- Single endpoint: yes · yes [S5]
- Teams bots: yes [S5]
- Teams included: Microsoft Teams chat, calls and meetings included [S1]
- Teams included with teams version: yes [S2]
- Templates: Templates for real-time collaboration, communication, AI automation, agents [S1]
- Trial preview: yes [S1]
- User limit: 300 · 1 · yes [S2]
- Visio web: yes · yes [S2]
- Webinars: Business Premium includes Teams webinars [S1]
- Windows 11 pro upgrade: Windows 11 Pro upgrade included [S2]

**Support**
- Code samples: Code samples are available for download and exploration [S4]
- Impressum channels: Supportseiten · Kontakt-Webseite · E-Mail [S3]
- Quick start: A quick start is available to build your first connector [S4]
- Videos: Microsoft and community-produced interactive demos and videos are available [S4]

## Questions

### Is Microsoft SharePoint European?

No. whats-best.ai classifies Microsoft SharePoint as Rest of world.

### Where does Microsoft SharePoint store data?

Not stated on the vendor’s pages as of 13 Oct 2026.

### Does Microsoft SharePoint have a free plan?

Not stated on the vendor’s pages as of 13 Oct 2026.

### What are the best alternatives to Microsoft SharePoint?

As of 15 Oct 2026, the panel rates [AMAGNO (3/5)](https://whats-best.ai/software/document-management/amagno), [Doxis (3/5)](https://whats-best.ai/software/document-management/doxis) and [EASY Archive (2.5/5)](https://whats-best.ai/software/document-management/easy-archive) highest among the other 14 Document Management (DMS) products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [AMAGNO](https://whats-best.ai/software/document-management/amagno) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Microsoft SharePoint alternatives](https://whats-best.ai/software/document-management/microsoft-sharepoint/alternatives).

## What this page leaves out

- 16 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 data facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 support fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 sovereignty dimension could not be confirmed on the vendor’s own pages and is shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage: https://www.microsoft.com/de-de/microsoft-365/sharepoint (checked 2026-10-13)
- [S2] Pricing page: https://www.microsoft.com/de-de/microsoft-365/sharepoint/compare-sharepoint-plans (checked 2026-10-01)
- [S3] Legal notice: https://www.microsoft.com/de-de/rechtliche-hinweise/impressum (checked 2026-10-13)
- [S4] Document workflows & integrations — found from sitemap: https://developer.microsoft.com/en-us/microsoft-365/copilot-connectors (checked 2026-10-13)
- [S5] Document workflows & integrations — found from sitemap: https://developer.microsoft.com/en-us/graph/rest-api (checked 2026-10-13)
- [S6] Audit-proof archiving & retention — found from sitemap: https://www.microsoft.com/de-de/microsoft-365/microsoft-365-archive (checked 2026-10-13)
- [S7] Audit-proof archiving & retention — found from sitemap: https://www.microsoft.com/en-us/microsoft-365/content-management-solutions/data-retention (checked 2026-10-13)

---

Cite as: whats-best.ai, "Microsoft SharePoint — Document Management (DMS)", AI panel analysis, as of 2026-10-20. https://whats-best.ai/software/document-management/microsoft-sharepoint

Corrections: https://whats-best.ai/correct/626?target=page