Cloud, Email and Workplace Productivity
Email, files, meetings and devices that work the same way for everyone, secured from the first day and supported after it.

Reference system
Symptoms
When this matters
If any of these describe your environment, this is the conversation to have.
- 01Email still runs on an old server, a hosting-plan mailbox or an account nobody administers.
- 02Staff share files by email and USB because the shared drive is slow, full or unreachable from home.
- 03You pay for licences nobody uses, and are not sure every active user is covered.
- 04There is no multi-factor sign-in, and laptops and phones are not managed at all.
- 05A merger, rebrand or new office means moving mail and files between tenants without breaking anything.
Scope
What KINNEX delivers
Most organisations run on a handful of cloud services, and most of the risk and waste sits in how those services are configured. We set up the platform that suits you, secure identity and devices from day one, move your mail and files without a bad Monday, and keep the whole thing administered.
- Microsoft 365, Google Workspace and Zoho set up, licensed, secured and supported.
- Email migration from Exchange, hosting mailboxes and other platforms, planned to avoid downtime.
- Identity, single sign-on and multi-factor authentication across every application.
- Device and mobile management so laptops and phones are configured, encrypted and recoverable.
- File-server modernisation to SharePoint, OneDrive and shared drives with sensible permissions.
- Backup of cloud data, which the platforms themselves do not provide by default.
Capability catalogue
Everything this covers
116 capabilities, scoped, sourced and delivered under one contract. Search for the exact term you use.
116 capabilities
Microsoft 36515
Set up, secured, licensed and supported, from a five-person office to a multi-site organisation.
- Tenant setup, domain verification and licensing design
- Exchange Online mailboxes, shared mailboxes and distribution lists
- Microsoft Teams: chat, meetings, channels and governance
- Teams Phone and calling plans, Teams Rooms integration
- SharePoint Online and OneDrive for Business
- Microsoft Entra ID, SSO and conditional access
- Intune for device and app management
- Defender for Office 365, Endpoint, Identity and Cloud Apps
- Purview: data loss prevention, sensitivity labels, retention and eDiscovery
- Power Platform: Power Apps, Power Automate and Power BI
- Planner, Forms, Loop, Viva and Bookings
- Microsoft 365 Copilot readiness and data-permission clean-up
- Secure-score improvement and CIS Foundations Benchmark hardening
- Business, Enterprise, Frontline and Education plan selection
- Licence optimisation and right-sizing
Google Workspace10
- Workspace setup, domain and plan selection
- Gmail, Calendar, Drive, Docs, Sheets, Slides, Meet and Chat
- Shared drives, groups and sharing policies
- Admin console, organisational units and security baselines
- Google Vault for retention and eDiscovery
- Data loss prevention and context-aware access
- Chrome Enterprise and Chromebook management
- Google Workspace for Education and Classroom
- AppSheet and Apps Script automation
- Migration from Microsoft 365, Exchange or other mail platforms
Zoho and other business suites6
- Zoho Workplace, Zoho Mail and Zoho One
- Zoho CRM, Books, People, Desk and Creator
- Proton Mail and privacy-focused mail platforms
- Zimbra and self-hosted mail servers
- Hosting-provider mail and cPanel mailboxes
- Choosing between suites on cost, data location and features
Email migration and messaging13
Moving mail without losing history, and without a bad Monday.
- Exchange on-premises to Microsoft 365: cutover, staged and hybrid
- Google Workspace to Microsoft 365 and the reverse
- IMAP, POP and hosting-provider mailbox migration
- Tenant-to-tenant migration for mergers and rebrands
- Mailbox, archive, PST, calendar, contact and public-folder migration
- MX record cut-over planning with minimal downtime
- Mail-flow rules, connectors and routing
- SPF, DKIM and DMARC setup and enforcement
- Spam, phishing and malware filtering
- Email signatures, disclaimers and branding
- Retention, journaling and archiving
- Mailbox backup and recovery
- User communication and training around cut-over
Identity, SSO and access10
- Entra ID, Google Identity and Okta configuration
- Multi-factor authentication rollout and passkeys
- Single sign-on to SaaS apps with SAML and OIDC
- Conditional access and risk-based sign-in policies
- Active Directory to Entra ID synchronisation
- Guest and partner access governance
- Access reviews and role-based access
- Password policy and self-service reset
- Privileged identity management
- Automated user provisioning with SCIM
Device and mobile management (MDM and UEM)12
- Microsoft Intune, Jamf, VMware Workspace ONE, Hexnode and Google endpoint management
- Windows Autopilot zero-touch deployment
- Apple Business Manager, automated device enrolment and Android Enterprise
- BYOD and mobile application management
- Compliance policies tied to conditional access
- App packaging and deployment
- Remote lock, wipe and retire
- Wi-Fi, VPN and certificate profiles
- Kiosk and shared-device modes
- Patch and update rings
- Disk-encryption enforcement and recovery-key escrow
- Inventory and compliance reporting
Collaboration and communication9
- Teams, Slack, Zoom, Webex and Google Meet governance
- Cloud telephony: Teams Phone, Zoom Phone, Webex Calling
- Meeting-room integration and webinar and event tools
- Intranet and document management on SharePoint
- Knowledge bases on Confluence and Notion
- Project and task management: Planner, Jira, Asana and Trello
- External collaboration and guest sharing policies
- Digital workplace design and information architecture
- Naming, lifecycle and ownership rules for teams and sites
File services, storage and backup8
- File-server migration to SharePoint, OneDrive and shared drives
- Known Folder Move for desktops and documents
- Permissions clean-up and information-architecture design
- External sharing controls and expiry
- Retention and legal-hold policies
- SaaS backup for Microsoft 365 and Google Workspace
- Ransomware recovery for cloud data
- Data classification before migration
Security and compliance for the workspace10
- DLP policies, sensitivity labels and rights management
- Safe Links, Safe Attachments and anti-phishing policies
- Message encryption and secure external sharing
- Audit logging and alerting
- Insider-risk and communication-compliance tooling
- DMARC enforcement and brand protection
- Shadow-IT discovery and CASB controls
- Retention and deletion designed for India's DPDP Act
- Security baselines: CIS Microsoft 365 and Google Workspace benchmarks
- Phishing simulation and user training
Cloud infrastructure, hosting and virtual desktops8
- AWS, Azure and Google Cloud workloads
- Domain registration, DNS management and SSL certificates
- Website and email hosting, managed WordPress
- CDN and web protection with Cloudflare
- Virtual desktops: Azure Virtual Desktop, Windows 365, Amazon WorkSpaces, Citrix
- Remote-work enablement with VPN, ZTNA and secure browsers
- Backups for cloud servers and websites
- Hybrid connectivity to on-premises systems
Licensing, billing and cost control7
- Licence procurement through CSP, volume and direct channels
- Plan comparison and mix of plans across roles
- Right-sizing, true-up and renewal management
- Education, non-profit and government pricing programmes
- Consolidation across entities and subsidiaries
- Usage and adoption reporting to retire unused licences
- Cost reporting by department
Adoption, training and operations8
- Onboarding sessions and role-based training
- Champions programme and quick-reference guides
- Tenant health check and configuration review
- Admin as a service: users, licences, groups and policies
- Service-health monitoring and incident communication
- Domain, DNS and SSL renewal calendar
- Support under SOP and SLA
- Governance board and change calendar
Nothing listed under that term yet. If you need it, ask: we can usually source or deliver it through a specialist team. Tell us what you need.
The site, in 3D
One workspace for office, home and branch
Identity, email, files and devices managed together, so staff work the same way wherever they sit.
- Office
- Remote staff
- Identity and MFA
- Cloud tenancy
Real-time 3D illustration of a typical site, not a specific client project.
Use cases
Where this shows up
Typical situations that lead an organisation to this work.
01
A growing company moving from a hosting-plan mailbox to a managed business email platform.
02
An office merging two companies into one tenant, with mailboxes, files and domains combined.
03
A school or college standardising on Google Workspace for Education or Microsoft 365 A-series.
Delivery method
How the work runs
Architecture before equipment. Validation before handover.
Stage 01 of 6
Assess
Review mail, files, identities, devices and licences, and what the business actually depends on.
Stage 02 of 6
Design
Choose the platform and plan, and design identity, security, migration waves and governance.
Stage 03 of 6
Implement
Configure the tenant, migrate mail and files in waves, enrol devices and enable multi-factor sign-in.
Stage 04 of 6
Validate
Test mail flow, sign-in, permissions and recovery with a pilot group before everyone moves.
Stage 05 of 6
Document
Hand over admin guides, policy settings, a licence register and user quick-start guides.
Stage 06 of 6
Support
Run administration, licence changes, renewals and tenant health checks under an agreed SOP and SLA.
How we take this on
One contract. The right specialist for every part
Your project is wider than any single team. We scope all of it, source all of it and carry the responsibility for all of it.
- 01
Scope
We survey, size and specify against standards and your operating reality, not against a brochure.
- 02
Source
Any make, any model, from the manufacturer, distribution or registered importers. GST-compliant invoicing, warranty and returns handled for you.
- 03
Deliver
KINNEX engineers do the work we do every day. Where a job needs a specialist, we bring in the right expert team as a sub-order under your single contract.
- 04
Own
One scope, one SOP, one SLA and one point of accountability, whoever is on site.
Standards and terms
Standards we design to, and the terms you will hear
Specifications are written against recognised standards. Here is the vocabulary, in plain language.
- SPF, DKIM and DMARC (RFC 7208, 6376, 7489)
- SAML 2.0, OpenID Connect and OAuth 2.0
- SCIM user provisioning
- CIS Microsoft 365 Foundations Benchmark
- CIS Google Workspace Benchmark
- ISO/IEC 27001, 27017 and 27018 aligned practices
- NIST SP 800-63 (digital identity)
- India DPDP Act 2023
- ITIL 4 service management
- Tenant
- Your organisation's own space inside a cloud service such as Microsoft 365 or Google Workspace, holding your users, mail and settings.
- MX record
- The DNS setting that tells the internet where to deliver your email. Changing it is the moment mail actually moves.
- Cutover, staged and hybrid migration
- Moving all mailboxes at once, in batches, or running old and new side by side during the move.
- SPF, DKIM, DMARC
- Three DNS-based checks that prove an email came from your domain and tell receivers what to do with fakes.
- Conditional access
- Rules that decide whether a sign-in is allowed based on who, where, on which device and how risky it looks.
- MFA and passkeys
- Proving identity with more than a password. Passkeys and hardware keys resist phishing best.
- SSO and SCIM
- One sign-in for many apps, and automatic creation and removal of accounts in those apps.
- MDM, MAM and UEM
- Managing whole devices, only the work apps on personal devices, or all endpoints from one console.
- Autopilot and ABM
- Zero-touch setup: a new Windows, Mac or phone is shipped to the user and configures itself on first sign-in.
- DLP and sensitivity labels
- Rules and tags that stop labelled data being shared where it should not go.
- Retention and eDiscovery
- How long data is kept, and the ability to search it for legal or compliance requests.
- Secure score
- A built-in rating of how well a tenant is configured against recommended security controls.
- CSP
- Cloud solution provider: buying Microsoft cloud licences monthly through a partner rather than directly.
- Known Folder Move
- Redirecting Desktop, Documents and Pictures to OneDrive so they are backed up and available anywhere.
- SOP and SLA
- The documented procedures for administering the tenant, and the response targets agreed for it.
Brands
Any make. Sourced, supplied and supported
We specify against your requirement and standards, then source the right product from the manufacturer, distribution or registered importers. Delivered, installed and supported under one contract.
Workspace, collaboration and business software
Email, productivity, design, engineering, accounting and CRM licensing.
Microsoft
Microsoft 365
Google Workspace
Zoho
Slack
Atlassian
Zoom
Cisco Webex
Dropbox
Box
Notion
Adobe
Autodesk
SOLIDWORKS
Salesforce
Freshworks
ServiceNow
SAP
Show 36 more brands
Oracle
Odoo
Intuit
DocuSign
Trello
Asana
Figma
Miro
Windows Server
Microsoft Teams
OneDrive
AutoCAD
Trimble
Ansys
MathWorks
Corel
Grammarly
LibreOffice
Nextcloud
Proton
Mailchimp
HubSpot
Zendesk
- Tally
- Canva
- monday.com
- SharePoint
- Exchange Server
- Power BI
- Visio
- Revit
- Bentley
- Nitro
- Foxit
- Zimbra
- Smartsheet
Device and endpoint management
MDM, UEM, patching, remote monitoring and management.
Microsoft Intune
VMware Workspace ONE
Samsung Knox
NinjaOne
Datto
Ivanti
Absolute
BigFix
Sophos Mobile
IBM MaaS360
SOTI
- Jamf
- JumpCloud
- ManageEngine
- Hexnode
- Kandji
- 42Gears
- Google Endpoint Management
Show 12 more brands
- Atera
- Kaseya
- ConnectWise
- N-able
- Pulseway
- SolarWinds
- Tanium
- Lansweeper
- GLPI
- Snipe-IT
- Scalefusion
- Mosyle
Email security and data loss prevention
Anti-phishing, sandboxing, encryption, archiving and DLP.
Proofpoint
Barracuda Networks
Sophos
Forcepoint
Trellix
Symantec
Microsoft Purview
Trend Micro
Cisco Secure Email
Google Workspace
Cloudflare
- Mimecast
- Netskope
- Safetica
- Digital Guardian
- Zscaler
- Ironscales
- Abnormal Security
Show 9 more brands
- KnowBe4
- Egress
- Virtru
- Varonis
- Titus
- Seclore
- Cyberhaven
- Tessian
- Hornetsecurity
Identity, MFA and privileged access
SSO, MFA, IAM, password vaulting and privileged session control.
Okta
BeyondTrust
ARCON
Microsoft Entra
Ping Identity
Thales
Entrust
Auth0
OneLogin
Keeper
1Password
Bitwarden
LastPass
RSA
Yubico
Teleport
Zoho Vault
Google Authenticator
Show 13 more brands
Microsoft Authenticator
- CyberArk
- Ekran System
- Duo Security
- ForgeRock
- JumpCloud
- Delinea
- HashiCorp Vault
- SailPoint
- Saviynt
- Imprivata
- StrongDM
- ManageEngine PAM360
Cloud and hosting
Public cloud, Indian data-centre providers, hosting and colocation.
Amazon Web Services
Microsoft Azure
Google Cloud
Oracle Cloud
IBM Cloud
Alibaba Cloud
DigitalOcean
Hostinger
GoDaddy
Cloudflare
Vultr
Hetzner
Bharti Airtel
Jio Cloud
Rackspace
Equinix
- E2E Networks
- Yotta
Show 12 more brands
- CtrlS
- Sify
- Tata Communications
- NxtGen
- Linode
- OVHcloud
- Netmagic
- STT GDC
- AdaniConneX
- Nxtra
- Web Werks
- Pi Datacenters
Product names, logos and brands are property of their respective owners and are used for identification only. Don't see what you need? We can usually source it, including through registered importers.Ask us.
Technology fit
The technology categories this work draws on.
- Microsoft 365, Exchange Online, Teams, SharePoint and Intune
- Google Workspace, Gmail, Drive and Chrome Enterprise
- Zoho, Proton and other mail and productivity suites
- Entra ID, Okta and single sign-on
- Mobile device and endpoint management
- Cloud backup for SaaS data
Reading
Related insights
Cloud, Email and Workplace Productivity
Cloud is not a backup: protecting SaaS data and finding shadow IT
Email and file services keep your data available, not necessarily recoverable. How to back up SaaS data and bring unmanaged tools into view.
Cloud, Email and Workplace Productivity
Email migration checklist: moving to the cloud without losing mail
Inventory, DNS, cut-over, mobile profiles and rollback. A plan that keeps email flowing on the day you switch.
Cloud, Email and Workplace Productivity
Microsoft 365 or Google Workspace: choosing a workplace suite
Email, files, meetings, security and administration compared in plain terms, with the questions that should decide it for your organisation.
Questions
Frequently asked questions
Neither is better in general. The right choice depends on the applications you already use, your files and compliance needs, your devices and your budget. We compare them against your situation and recommend one, with the reasons written down.
A planned migration keeps mail flowing. Mail is copied ahead of time, the final switch of the delivery address is scheduled at a quiet time, and a short delta sync brings across the last messages. Users usually notice a change of sign-in, not a gap.
Yes. The platforms keep your service running, but they are not a full backup of your data. Accidental deletion, ransomware and departing staff can all cause loss that the platform will not undo. Third-party backup closes that gap.
Yes, with mobile application management the work data lives in a protected container that can be wiped without touching personal data. Policies are set with you first.
We assign the right plan to each role, track renewals on a calendar, remove unused licences and report spend. You see where the money goes before each renewal.
Yes. Day-to-day administration, user changes and tenant reviews can be covered under a support agreement with a written SOP and SLA, shaped to your needs.
Plan an email or workspace move
Tell us the site, the constraint or the outcome you need, and we will come back with the right next step.


