The Platform Underneath
Most safety software is a walled application in a vendor's tenant. We offer managed apps that run inside your Microsoft tenant, on the platform your IT team already governs — so the security is Microsoft's and independently verifiable, the data is yours, and your customizations survive every upgrade.
A platform, not a locked box
It installs complete and runs on day one — then, because it lives in your tenant on Power Platform, the parts that should be yours, are.
Day one
The core installs clean: no third-party services to vet, no premium connectors, and no post-install configuration to chase. It runs on the standard Power Apps licenses your IT team already plans for — and works the moment it’s deployed.
Add-ons
Sample templates for automated notifications and Copilot Studio agents show you how to build the automation your organization needs — adopt them, adapt them, or start from scratch.
Customize
Add your own tables, fields, forms, views, flows, and agents with the low-code tools your team already uses. A stable managed core underneath; broad room to build on top with full Application Lifecycle Management.
Competitors give you one stack and a feature-request queue — you take what they ship and wait months for the rest. With IncidentAnalytix your team can extend it tomorrow, while a managed core keeps every customization safe through upgrades.
Because the app lives on Power Platform, it can connect to your other systems of record through over 1300 connectors from the Microsoft library including line-of-business platforms like Oracle, Salesforce and SAP. Every connection authenticates through Microsoft Entra ID and is governed by the same conditional-access and data-loss-prevention policies that already protect your tenant. Every integration is a governed connection under your control, not a copy of your data handed to a vendor's middleware. For everything from a university wiring incident data to a student information system, or an enterprise tying it to HR, that means connecting to tour other enterprise data without your most sensitive records ever leaving your control.
Agentic AI — built in, not bolted on
AI isn’t a feature grafted onto IncidentAnalytix. It’s native to the platform underneath it — which means you it comes bakes in rather than bolted on and you can build on it. Build agents that triage incident severity on intake and flag high-risk reports, generate plain-language incident summaries from narrative fields, surface patterns across programs and locations, and check reports for completeness before they're filed.
AI you get
Find records in plain language, summarize an incident, or narrate a dashboard — modern AI assistance, native to Power Platform and available in the app your team already uses.
AI you build
Because IncidentAnalytix lives in your tenant, your team can build Copilot Studio agents against your own safety data — a severity-triage assistant, an incident-summary agent — a capability you own and extend, not a feature you wait for a vendor to ship.
Stay on the cutting edge with Microsoft AI adding new features every month directly in your Microsoft tenant. Start today to get AI fully integrated across your risk management stack.
Built On
SystemsAnalytix is built on first-party Power Platform layers; no third-party stack to vet. Every layer provides full Microsoft Security that your IT team governs already.
Applications
The full web application your safety team works in.
Data
The secure data foundation — in your own tenant.
Automation
The workflow engine behind every routing and approval.
Analytics
Dashboards and reporting on your live data.
AI & Agents
AI native to the platform — that you can build on.
Portals
Authenticated portals for field and occasional users.
How your people access it
Internal staff work in the full Model-Driven App; field and occasional users report through an authenticated Power Pages portal — both on the same Dataverse records in your tenant. And you can run the Model Driven app directly inside Microsoft Teams.
In-house · everyday users
For the people who work the incidents — your safety office, investigators, and administrators. They get the full experience inside Microsoft 365: rich forms, dashboards, bulk actions, and the complete contributing-factor analysis, governed by your Entra ID.
Occasional users
For the people who submit data to the system — field staff filing a report from a remote site, or a program director reviewing their own incidents — Power Pages offers a secure, web portal, without requiring every user to have a full application seat.
Teams
The same Model-Driven App, running inside the Microsoft Teams client your staff use every day. No separate app to launch so reporting and review happens as part of daily workflow. Dataverse security roles and permission still apply in Teams
The Power Pages site is an Add-on to IncidentAnalytix, not a separate system. It provides another authenticated door into the same records in your tenant — so a field report lands directly in the safety team's workspace, with no re-keying and no data leaving your environment. The best of both worlds: a full application for internal staff, and more economical authenticated-portal access for occasional users.
Security & compliance
SystemsAnalytix apps inherit the full compliance posture of the Microsoft Power Platform.
Independently verifiable
IncidentAnalytix runs on Microsoft Power Platform and Dataverse, covered by SOC 2 Type II attestation and ISO/IEC 27001 certification — independently audited and verifiable through the Microsoft Service Trust Portal. IncidentAnalytix inherits that posture; it is not separately certified.
Shared Responsibility
Power Apps, Power Automate, and Power BI are in-scope services under Microsoft’s HIPAA Business Associate Agreement. Whether a deployment meets HIPAA or FERPA obligations depends on your organization’s agreement with Microsoft and how you configure and use the system. IncidentAnalytix is the system of record; your organization governs the data placed in it.
| Security | Details |
|---|---|
| Identity & access | Microsoft Entra ID, conditional access, and MFA. |
| Granular confidentiality | Role-based and column-level security for sensitive fields. |
| Data residency | Your data stays in your tenant, in your chosen region. |
| Auditability | Platform-level audit logging of who did what, when. |
| Platform certifications | Runs on Microsoft's SOC 2 Type II and ISO/IEC 27001-certified cloud. |
Certifications above belong to the Microsoft Power Platform which IncidentAnalytix runs on. See the Microsoft Trust Center for additional details. An IncidentAnalytix HECVAT 4 attestation is available upon request.
Enterprise-level Security
For IT and security teams evaluating the platform, here are posture, governance, and compliance details.
Microsoft Entra ID — centralized identity with Single Sign-On across the entire Microsoft ecosystem, and Conditional Access policies that adapt to user, device, location, and risk signals.
Multifactor authentication — enforced by default, with a range of methods: Authenticator app, biometrics, and hardware tokens.
Role-based access control — granular permissions on data and features, built on the principle of least privilege to limit exposure by design.
Microsoft Azure hosting — globally distributed, resilient data centers with built-in redundancy and continuity.
Microsoft Sentinel — AI-driven threat detection with automated response and proactive remediation to shorten reaction time.
Zero Trust architecture — every access request is verified; no implicit trust. Data is encrypted at rest and in transit, on infrastructure Microsoft patches continuously.
Data loss prevention — built-in policies and strict connector governance prevent inadvertent sharing or exposure of sensitive data.
Residency & sovereignty — options to control where data is stored geographically, supporting regional and national data-sovereignty requirements.
Retention & lifecycle — configurable retention, archival, and deletion policies for compliant, deliberate data handling.
Power Platform Admin Center — a single console overseeing every environment, app, flow, and connector.
Environment isolation — separate development, testing, and production environments to control change and contain risk.
Unified monitoring — real-time visibility into platform usage for proactive resource and compliance management.
Source control & pipelines — can be integrated with Power Pipelines, Azure DevOps and GitHub for deployment.
Solution packaging — managed and unmanaged solutions enable secure versioning and controlled, repeatable deployments.
Activity & change logging — Dataverse can be enabled to log record changes, user access, and read/export operations, configurable down to the individual table and column. With auditing enabled on a production environment and the required licensing, these logs can flow to Microsoft Purview for search, retention, and investigation.
Framework auditing — that audit trail supports auditing against standards like GDPR, SOC 2, FERPA, and HIPAA. Search, retention, and reporting in Purview require Purview/Microsoft 365 E5-tier licensing and that auditing be turned on for the environment.
These are Microsoft platform capabilities your organization enables and governs with the appropriate licensing — not features SystemsAnalytix activates.
Copilot Studio governance controls — built-in guardrails for responsible, transparent AI use aligned to your organizational standards.
AI usage monitoring — track how Copilot and agents interact with data to prevent misuse and enforce policy.
AI-powered security insights — AI monitors for unusual activity and helps identify and mitigate risk in real time.
Automated enforcement — use Power Automate to run periodic reviews, access-control audits, and resource lifecycle management.
Customizable workflows — tailor governance flows to your organization's requirements for continuous policy enforcement.
See how IncidentAnalytix runs — and extends — inside your own Microsoft tenant.
