A daily copy of every client document. Landing in a folder you own in OneDrive.
Connect your firm's Microsoft OneDrive and ImmiIQ backs up every client and sponsor document, once a day, into a folder tree that lives inside your account. Bring your own storage. Keep the external copy under your firm's control. If you ever move off the platform the archive is already sitting on your side.
- Priya Sharma / passport.pdf2.4 MB
- Priya Sharma / IELTS_2026.pdf1.1 MB
- Daniel Nguyen / skills_assessment.pdf3.8 MB
- Sponsors / Northmore Hotels / SBS.pdf0.9 MB
- Sponsors / Northmore Hotels / labour_agreement.pdf1.6 MB
What the OneDrive backup actually does.
Every capability listed below is live in production today. Nothing here is a roadmap promise or a marketing stub.
Daily incremental run
Once a day the scheduled job compares the sealed manifest against what has changed since the last run and uploads only new or updated documents. Bandwidth stays proportional to real activity.
Folder tree you own
Pick the parent folder in a picker inside ImmiIQ. We create a subfolder per client and a subfolder per sponsor beneath it. Rename, move or share from OneDrive without breaking the backup.
Clients and sponsors
Every uploaded document on both the client record and the sponsor record is included. Passports, skills assessments, references, SBS forms, labour agreements and generated PDFs all end up in your OneDrive.
Manifest and audit log
Each run writes a manifest of what was copied, what was skipped and any errors. The tenant audit log records the run outcome so a compliance reviewer can confirm the backup happened.
How it works.
Three stages. Connect, configure and then everything else runs itself. The next scheduled run kicks off overnight in Sydney time.
Connect
Sign in with your Microsoft 365 account under Settings then Integrations. Microsoft shows the exact Graph scopes ImmiIQ has asked for. Approve and the connection is live. Global admins can grant tenant-wide consent so end users skip the individual prompt.
Configure
Pick the parent folder in a OneDrive picker. Choose whether to include historical documents in the very first run or start from today. Set a delivery email address for the daily backup summary so the practice manager sees the run outcome.
Automate
The scheduled job runs once a day. Only new or updated documents move. The manifest is sealed and stored so re-runs are idempotent and the audit log records the outcome for compliance.
In the app
One picker. One folder. A copy of everything.
The OneDrive backup tile sits in the Integrations marketplace inside the app. The first run backfills any historical documents you asked for, then the daily cadence takes over.
Security posture
Your OneDrive. Your key. Our copy job.
Access and refresh tokens are sealed with AES-256-GCM using a per-organisation key derived from AUTH_SECRET via HKDF. Microsoft rotates refresh tokens on every exchange and the sealed row is updated in place. Plaintext tokens never touch the database and never appear in logs. Every connect and disconnect is written to the tenant audit log with the actor, timestamp and IP. Tenant isolation is enforced at the row level: OneDrive credentials for one organisation cannot be queried, indexed or read from another organisation under any code path. Revoking the connection deletes the sealed row immediately and stops the scheduled job for that organisation within seconds. The daily manifest is stored on our side so re-runs are idempotent and a compliance reviewer can trace exactly what was copied on any given day. Nothing outside the ImmiIQ backup folder is touched by the integration.
Frequently asked.
What exactly gets backed up to my OneDrive?
Every document uploaded to a client or sponsor record in ImmiIQ is copied into a folder tree you own inside OneDrive. Passports, skills assessments, employment references, contracts, invoices and generated PDFs are all included. The client-facing metadata (name and case number) stays with the folder so you can navigate the archive without opening ImmiIQ.
How often does the backup run?
Once a day. The scheduled run compares the sealed manifest against what has changed on the case since the last successful run and uploads only the new or updated documents so bandwidth stays proportional to real activity. There is no manual re-run required.
Does the backup work with OneDrive for Business and SharePoint?
Yes. The integration targets OneDrive for Business and personal OneDrive accounts. The folder picker lists any drive accessible to the connecting user, including SharePoint document libraries surfaced through OneDrive for Business.
Which Microsoft Graph scopes does ImmiIQ ask for?
We request Files.ReadWrite plus offline_access so the refresh cycle keeps working without a fresh consent every hour. Files.ReadWrite is the minimum scope Microsoft Graph exposes for creating and updating files. Tenant admins can pre-approve the ImmiIQ app registration for the whole tenant.
How are OneDrive OAuth tokens stored and what happens on disconnect?
Access and refresh tokens are sealed with AES-256-GCM using a per-organisation key derived from AUTH_SECRET via HKDF. Microsoft rotates refresh tokens on every exchange and we persist the new one. Disconnecting the backup deletes the sealed row immediately and stops the scheduled job for that organisation. Every connect and disconnect is written to the tenant audit log.
Related integrations.
Turn on daily OneDrive backups in one minute.
Start a trial, connect your firm's OneDrive and pick a parent folder. Overnight the first backup lands. From then on your archive stays current on its own.