What we do across the SharePoint Online lifecycle
SharePoint Online Migration
From SharePoint Server (2013/2016/2019/SE), Google Sites, Confluence, network file shares, or legacy SharePoint Online tenants. Tenant-to-tenant migrations included.
Intranet Modernization
Modern communication sites + SharePoint Premium, hub-site architecture, Viva Connections integration, branding, and navigation IA.
Governance & Oversharing Remediation
Sensitivity-label architecture, oversharing audits, Microsoft Purview integration, retention policies, audit logging — all the SharePoint discipline that has to be in place before Copilot rolls out tenant-wide.
External Sharing & Conditional Access
External sharing model design, Entra ID conditional access policies, guest-user governance, B2B collaboration setup.
Records Management
SharePoint records management with retention enforcement aligned to industry regulations (HIPAA, SOX, FFIEC, federal records laws). Includes our National Archives lineage.
Microsoft Search & Copilot Grounding
Search tuning, custom verticals, and the sensitivity-label + permission discipline that determines what Microsoft 365 Copilot can surface.
Adoption & Change Management
4-week adoption programs covering Desktop, Service, mobile, governance, and end-user training. Custom training tracks for site owners + admins.
24/7 Managed SharePoint Operations
Under the Microsoft Cloud Orchestrator Practice — Strategy through Run, one accountable senior architect, continuous governance.
Why SharePoint Online governance is the deciding Copilot factor
Microsoft 365 Copilot grounds its answers in content the user has permission to see — and almost all of that content lives in SharePoint Online and OneDrive. When a user prompts Copilot, the response is composed from accessible files with sensitivity labels, retention, DLP, and Entra ID role assignments controlling what surfaces. Unresolved oversharing means Copilot can surface content the user was never meant to see.
EPC Group's Governed AI on Microsoft Framework codifies the SharePoint Online discipline that has to be in place before Copilot rolls out tenant-wide: sensitivity-label architecture (FedRAMP-aligned where required), oversharing remediation, retention policies, Microsoft Purview integration, audit logging configured for compliance retention. We do not enable Copilot tenant-wide before this is done.
Migration scenarios we handle
- SharePoint Server 2013 / 2016 / 2019 → SharePoint Online — with IA redesign for the modern UX, sensitivity-label rollout, and end-user comms
- SharePoint Server Subscription Edition → SharePoint Online — typically a phased migration to retain on-prem for FedRAMP-High workloads while moving everything else
- Google Sites → SharePoint Online — IA migration with permission mapping, common in Google Workspace to Microsoft 365 transitions
- Confluence → SharePoint Online — including page-history preservation and Confluence-specific macro re-implementation
- Network file shares → SharePoint Online — including sensitivity-label classification at migration time
- Tenant-to-tenant (M&A / divestiture) — phased per-workload cutover with identity coexistence and per-wave validation
- Legacy SharePoint Online → modern SPO + Premium — for organizations that adopted SPO years ago and never modernized to the current communication-site model
EPC Group's SharePoint credentials
Verifiable at /about/facts:
- Four-time Microsoft Press author — including multiple SharePoint titles. Most SharePoint consulting firms do not have author-depth credentials.
- 25+ years of SharePoint consulting since the early 2000s when SharePoint Portal Server first shipped.
- Federal Reserve Bank of New York TARP eDiscovery — oversight reporting up to the Congressional Oversight Committee.
- National Archives — consulting on SharePoint records management.
- U.S. intelligence community — consulting on Microsoft governance and records management.
- G2 Leader for six consecutive quarters (Fall 2024 through Summer 2026), G2 average 4.4 / 5 across 15 verified reviews.
How we engage
Most SharePoint Online engagements run through the Microsoft Cloud Orchestrator Practice — one accountable senior architect across Strategy through 24/7 Run, not a distributed account-team model. For focused work (migration-only, governance-only, adoption-only), we run fixed-fee scoped engagements with weekly executive readouts.