The Challenge

Apex Inspections and its subsidiary, NDT Level III, needed more than a simple SharePoint refresh — they needed a full internal and external document ecosystem that could keep employee, IT, and customer access cleanly separated. Their existing environment lacked the structure to support three distinct audiences: internal staff, internal-only sensitive customer records, and customers who needed direct, self-service access to their own files. Without clear boundaries, the risk of over-exposed permissions and disorganized content was growing alongside the business.

Compounding the problem, SharePoint’s permission model and site architecture aren’t something a business can pick up in an afternoon. Like most growing companies, NDT Level III’s team was already stretched across day-to-day inspection work and customer service — nobody had the extra bandwidth to become a part-time SharePoint administrator on top of their actual job. Left unaddressed, that gap meant either the environment stayed disorganized, or someone’s real responsibilities took a back seat to figuring out permissions and folder structures by trial and error.

The Solution

At its core, NDT Level III needed two things to work side by side without compromising either one: a single, organized home for the company’s internal data — covering both day-to-day operations and the sensitive customer records staff manage on customers’ behalf — and a separate, secure way to hand specific files directly to each customer, with zero risk of one customer ever seeing another’s data. Calibrate 365 partnered with Apex Inspections and NDT Level III to design and build a three-site SharePoint environment tailored to exactly that reality:

• Company Intranet — a branded internal hub for day-to-day employee resources and communication.
• Customer Hub — an external-facing site giving customers direct, self-service access to their own files, and nothing else.
• Internal Customer Files — a secured, internal-only site where staff manage sensitive customer documentation that customers themselves never see.

Every site was built with custom NDT branding, including custom icons generated with Microsoft Copilot to give each site a polished, recognizable identity instead of default SharePoint styling.

Access was governed through Microsoft 365 security groups mapped directly to how the organization is structured — internal job function, IT department administration, and customer access — so permissions followed real business roles rather than one-size-fits-all sharing links.

Once the architecture and permissions model were in place, Calibrate 365 reviewed every site page for structure and usability, onboarded all users, and then custom-scripted the creation of a consistent, repeatable file structure across all three sites and their corresponding security groups — eliminating manual folder setup and ensuring every site launched with the same organized foundation.

The Result

Apex Inspections and NDT Level III now operate on a SharePoint environment purpose-built around their business, not a default template. Employees, IT, and customers each interact with exactly the content they should — no more, no less — while sensitive customer files stay fully separated from anything customer-facing.

Access is controlled at more than one layer. Dedicated security groups govern who can reach each of the three sites in the first place, mapped to real job functions rather than a blanket “everyone” group. Inside the Customer Hub, permission inheritance was removed from the customer document library entirely, so each customer’s folder is secured on its own — one customer’s files are never visible to another, even by accident, and granting or changing one customer’s access can never ripple into anyone else’s.

Calibrate 365 also built the Customer Hub as a true home base rather than a dead end, designing it to link out to every department site built as part of this engagement, plus the department sites NDT Level III already had in place beforehand. Customers and staff now land in one place and can navigate to whichever site or department they actually need, instead of hunting for bookmarked links or asking IT where something lives.

The scripted file structure means future sites or groups can be stood up quickly and consistently, and the custom branding gives both the internal team and external customers a cohesive, professional experience.

Why It Matters

For companies managing sensitive third-party or inspection data — like NDT Level III’s nondestructive testing records — permission structure isn’t just an IT nicety, it’s a compliance and trust issue. Calibrate 365 builds Microsoft 365 environments that reflect the real shape of a business, so security and usability aren’t competing goals.

There’s a forward-looking reason this matters too. Tools like Microsoft 365 Copilot are only as safe as the permission structure underneath them — an AI assistant can only respect boundaries that actually exist. A messy, over-permissioned SharePoint environment doesn’t just create risk today; it becomes a liability the moment a company turns on AI features, because those tools will surface anything a user technically has access to, whether or not they should. By building clean, role-based permissions now, NDT Level III is already positioned to adopt Copilot and future AI capabilities safely, without a costly cleanup project standing in the way first.

And beyond the technical result, there’s a simpler benefit: NDT Level III doesn’t have to become the expert. Calibrate 365 owns the platform knowledge, the governance decisions, and the day-to-day “how does this actually work” questions, so the customer’s team can stay focused on running their business — inspections, customers, growth — instead of becoming part-time SharePoint administrators. That’s the real value of a partner: removing the burden of the unknown, not just fixing a folder structure.