Fact-check date: 8 September 2026. SharePoint can be a robust document platform. Whether it is a suitable DMS for a law firm depends on legal workflows, permissions, retention, migration, operation, and the Microsoft 365 and Purview capabilities actually licensed.
SharePoint is included in many plans, but not every DMS capability is
SharePoint Online is included in many Microsoft 365 plans. That does not mean Purview retention, advanced Audit, eDiscovery, Microsoft 365 Copilot, or every automation is included at no additional cost. Plans and user populations must be checked against the current Purview retention documentation and licensing terms.
The former claim that SharePoint meets every core law-firm requirement without an additional licence was too broad. Matter management, deadline control, email filing, legal hold, qualified signatures, client portals, conflict checks, and specialist-system integration can require configuration, add-ons, or dedicated legal software.
Possible components
| Requirement | Accurate qualification |
|---|---|
| Client separation | Sites, libraries, and Entra groups; the permission design must be tested |
| Versioning | Configurable version history; version limits are not retention rules |
| Search | Microsoft Search indexes supported content within user permissions; results depend on content and configuration |
| Metadata | Columns, content types, and managed terms |
| Retention | Purview policies or labels, depending on scenario and licence |
| Audit | Purview Audit scope and retention depend on licence and audit tier |
| AI | Microsoft 365 Copilot requires separate licensing and does not replace permission governance |
Structure, retention, and Copilot
A possible architecture separates internal firm resources, active matter workspaces, and closed matters. One site per client is only one option; a large matter population may call for a different site and library model. SharePoint supports both folders and metadata. A controlled combination is often appropriate for navigation, migration, search, and user adoption.
Purview can retain content for a defined period and preserve a protected copy when users modify or delete the visible item. Behaviour, precedence, end-of-period deletion, and administrative override capabilities depend on policy and role. The absolute promise that not even an administrator can delete a document before expiry has therefore been removed. Consult Microsoft's current retention guidance.
Microsoft 365 Copilot generally operates with the signed-in user's existing permissions. It does not correct overly broad sharing. Microsoft advises organisations to address access and oversharing before rollout; see Data, Privacy, and Security for Microsoft 365 Copilot. Deadline answers are only dependable when deadlines are structured, current, and accessible.
Data location and professional secrecy
Microsoft documents customer-data locations by service and customer country under Microsoft 365 data locations. A Swiss billing address alone does not prove that every processing activity, backup, and support access occurs only in Switzerland. Service configuration, contracts, subprocessors, encryption, foreign access, Swiss data-protection law, and professional secrecy require legal and technical assessment before client data is moved.
Recommended process
- Gather workflow, statutory, and professional requirements
- Design information, permissions, retention, and deletion
- Create a licence matrix for SharePoint, Purview, Audit, Copilot, Power Platform, and external users
- Pilot representative matters and test permissions
- Plan migration, acceptance, training, monitoring, and recovery
A SharePoint-based DMS can be appropriate, but it should be compared with specialist software and total operating cost. Contact us for an initial discussion.