Virto Kanban Board App: the brief for your IT team

Someone in your organization wants Virto Kanban Board App. These are the answers an IT and security review asks for first.

For IT, security and procurement. Checked October 25, 2026.

Send to your IT team

At a glance

Your boards stay in your SharePoint lists
Delegated permissions only
Each person sees only what they can already see
Admin consent for the whole organization
Installed from Microsoft Marketplace
Runs on Microsoft Azure
No SOC 2 or ISO 27001 of our own
Deploy into Your Tenant on request

What the app does

Virto Kanban Board App shows the items of a SharePoint list as cards on a Kanban board, on a SharePoint page or in a Teams tab. The board shows the information stored in your SharePoint list: each card is a list item, and the app has no task store of its own.

Where your data is

Your boards stay in your SharePoint lists, in your Microsoft 365 tenant.
The app backend runs on Microsoft Azure. It processes content in memory to show it to the signed-in person and does not write it to disk. The Pro plan offers US, EU and APAC data residency.
What VirtoSoftware keeps: the Microsoft 365 user and tenant identifiers used for sign-in and licensing (Privacy Policy).
Data Processing Agreement under GDPR Article 28: request it, no NDA needed.

What the app asks Microsoft 365 for

All permissions are delegated. The app acts as the signed-in person and, in Microsoft’s words, “can’t access anything the signed-in user couldn’t access” (Microsoft Learn). It asks for no application permissions.

Permission	Microsoft’s description	Needs admin consent
`openid`, `profile`, `offline_access`	Sign users in, view their basic profile, keep access while they use the app	No
`Sites.FullControl.All`	Have full control of all site collections	Yes

The app signs in through Virto Apps, the Entra app 1d610c9c-d68b-494e-baad-ecff3123c065, which Virto Calendar App uses as well. The two apps share one entry and one set of permissions: consent given for either covers both, and each works with everything your tenant has granted that entry, still only as the signed-in person. Once your tenant has granted Sites.FullControl.All, for example in Virto Calendar App’s second consent, Kanban asks for nothing new. You see what your tenant granted in Microsoft Entra admin center > Enterprise applications and can review or revoke it there at any time.

People sign in with their Microsoft 365 work account. VirtoSoftware never receives a password.
A SharePoint administrator adds the app from Microsoft Marketplace to your app catalog. In Microsoft Teams, a Teams administrator makes the Teams app available in the Teams admin center.
An administrator who can grant tenant-wide consent, such as a Global, Cloud Application or Application Administrator, then consents for the whole organization. A SharePoint administrator cannot give this consent.
The board runs from VirtoSoftware’s domain inside your SharePoint page, so browsers have to allow its cookies. The documentation gives the step for Safari.
To edit a card, a person needs edit rights on the list item in SharePoint. Board Admins can narrow who sees or edits a board, and License Managers assign licences; board permissions never exceed or override SharePoint permissions.

Certifications, plainly

Question	Answer
SOC 2, ISO/IEC 27001	VirtoSoftware has neither and does not plan to. If your policy requires them, use Deploy into Your Tenant.
Microsoft 365 Certification	No. Virto Kanban Board App has completed Microsoft Publisher Attestation, a self-assessment Microsoft publishes, not an audit.
Hosting	Microsoft Azure. Azure’s own certifications cover the infrastructure, not VirtoSoftware’s processes.
Your questionnaire	We fill in your organization’s own form.

More for legal and security reviewers, including the EULA terms and how to request our security policies under NDA: Security & Compliance.

If your policy rules out SaaS

Deploy into Your Tenant runs the app in your own Azure subscription and Microsoft 365 tenant, under your own security controls and certifications. It is part of an Enterprise agreement. How it works.

What it costs, and the alternatives

Microsoft 365 already has boards. The question is what Kanban boards on your SharePoint lists, shared across sites and Teams, cost.

Microsoft 365 alone

No extra cost

Microsoft Planner
The board view in Microsoft Lists