01 What Saelyx does with Microsoft 365
Saelyx is a meeting assistant. With each user's permission it saves the meeting minutes to their OneDrive or a SharePoint library, sends the minutes from the user's own mailbox and posts them to the meeting's Teams chat. If the user turns on the suite blocks, they can also ask it by voice or chat to find or draft email, check or move their calendar, create tasks, save notes to OneNote, look up people and post to a Teams channel.
Always after the user confirms: Saelyx shows the draft first and sends or posts nothing until the person confirms, with the button or with a clear yes by voice or chat.
02 Delegated Microsoft Graph permissions
Every permission is delegated: it always acts on behalf of a signed-in user and never reaches further than that user can. Saelyx uses no application permissions; with no connected user it can access nothing.
| Permission | Block | What we use it for |
|---|---|---|
Calendars.Read | Calendar | Read the user's events to know which meeting is on. |
Files.ReadWrite | Repository | The user's OneDrive: save the minutes in the folder they choose, and read the files they choose to import. |
Files.ReadWrite.All | SharePoint | Only if the user picks a SharePoint library: save the minutes there, and read the files they choose to import. |
Sites.Read.All | SharePoint | Only if the user picks a SharePoint library: search sites and libraries so they can choose a destination. |
Mail.Send | Sending | Send the minutes, or an email the user dictates to Saelyx, from their mailbox, only when they confirm the send. |
OnlineMeetings.Read | Teams | Find the meeting's chat. |
ChatMessage.Send | Teams | Post the summary to that chat, only when the user confirms. |
Mail.Read | Search and read the user's email when they ask Saelyx to (for example, "which new emails do I have from this client"). Nothing is read in the background. | |
Calendars.ReadWrite | Calendar (write) | See the user's schedule and, only when they confirm, create, move or cancel an event. |
Tasks.ReadWrite | Tasks | List, create and complete tasks in Microsoft To Do, including the action items of a meeting. |
People.Read | People | Look up the people the user works with to fill in a recipient or an attendee. |
Contacts.Read | People | Search the user's contacts for someone's name and email. |
Notes.ReadWrite | OneNote | Save notes and meeting minutes to a "Saelyx" notebook of the user. It does not touch their other notebooks. |
ChannelMessage.Send | Channels | Post a message or meeting minutes to a Teams channel, only when the user confirms. |
Team.ReadBasic.All | Channels | List the Teams teams the user belongs to so they can choose where to post. |
Channel.ReadBasic.All | Channels | List the channels of those teams (name only) so they can choose where to post. |
openid, profile, email | Account | Identify the account being connected. |
offline_access | Account | Keep the connection alive without asking the user to sign in again. |
Each block is requested separately, when the user turns it on in Saelyx (incremental consent). None of these permissions requires admin consent by default, but an organization can restrict user consent, and then an administrator has to approve them.
03 What Saelyx does not do
- It does not read email in the background or on its own: it only searches or opens a message when the user asks Saelyx to, and only if they turned on the Email block. Nothing leaves their mailbox, calendar or any channel without their confirmation first.
- It does not read files on its own or in the background. It only lists folders and names while the user has the Import browser open, and it only downloads the file the user picks to bring into Saelyx or, if the user turns on a watched folder, what is new in that folder each time they press "Sync now" or ask Saelyx to. The permissions above are enough; none more is needed.
- It does not read Teams messages: it only lists team and channel names, and posts when the user confirms.
- It deletes no files. To save minutes or a file it creates the file or replaces the one with the same name in the chosen folder. A calendar event is only cancelled or moved when the user confirms.
04 What data Saelyx stores
- The email of the connected account.
- A refresh token, encrypted with AWS KMS.
- The repository preferences (destination, what is saved automatically and the watched folder, if any).
- The state of each copy: file name and link; and, for each file brought in from the watched folder, its name and version (so it is not repeated).
Saelyx does not store email, event or Teams chat content permanently. What it reads when the user asks (the text of an email, an event, a task) becomes part of their conversation with the assistant: it is processed by the providers listed in the privacy policy, and Saelyx's chat keeps that conversation for 24 hours at most. Also kept is an action the user has not confirmed yet, for 10 minutes at most. The infrastructure is in the European Union (AWS, Ireland). The token, the preferences and the state of the copies are deleted when the user disconnects their account or deletes their Saelyx account.
05 Approving Saelyx in your organization
Admin consent is granted by a Cloud Application Administrator or a higher role. There are three ways.
A · Generate the consent link
Enter your organization's domain (contoso.com), its tenant ID or organizations, keep ticked the blocks you want to approve and open the link with an administrator account.
When it finishes, Microsoft sends you back to https://saelyx.ai/microsoft-365/aprobado/, which tells you whether the approval was granted.
B · From the Microsoft Entra admin center
- Sign in to the Microsoft Entra admin center as an administrator.
- Open Enterprise applications and look for Saelyx. It shows up after someone in your organization tries to connect it or after you open the link from section A.
- Go to Permissions and select Grant admin consent.
C · Entra approval requests
If you turn on Entra's admin consent request workflow, users can ask you for approval from Microsoft's own consent screen, without leaving the flow. You get the request and decide.
06 Revoking
- The whole organization: in Entra, Enterprise applications > Saelyx > Properties > Delete; or Permissions > Revoke.
- Each user can disconnect their account in Saelyx > Account. That deletes their token and preferences.
07 Application identifiers
- Application (client) ID:
e3cec3d3-13e1-498c-843e-bbf938a8f0ec - Publisher: Enekui.
- Publisher verification: pending. Until then, Microsoft's consent screen may show "unverified" next to the name.
- Admin consent redirect URI:
https://saelyx.ai/microsoft-365/aprobado/
08 Contact
Security or approval questions: info@saelyx.ai. We answer on working days, by hand.