Risk Matrix 365

Risk Matrix 365 is a SharePoint Framework (SPFx) solution for SharePoint Online that helps organizations identify, assess, treat, and monitor enterprise risks directly within Microsoft 365 - with a 5×5 inherent matrix, risk queues, custom forms, email notifications, and Microsoft Teams access.

Deploy the solution once to your SharePoint Online tenant app catalog, add the web part to any modern SharePoint page or publish it as a full-page app, and use the built-in setup wizard to provision the required SharePoint lists. Risk Matrix 365 provides status and due-date queues, likelihood × impact scoring, display-name overrides, lookup administration, Excel migration from Risk Matrix (Pro), and configurable email notifications - while keeping risk data securely inside your Microsoft 365 tenant.

Ideal for

Enterprise risk, GRC, operations, IT risk, and internal audit teams - and any organization that needs a lightweight risk register on Microsoft 365 without leaving SharePoint or Teams.

Key Features

• Identify and track risks with categories, business units, owners, due dates, and status queues
• Home dashboard with KPI cards, a 5×5 inherent likelihood × impact matrix, severity mix, and latest risks
• Risk Rating page to filter Critical, High, Medium, Low, and unrated items by calculated likelihood × impact score
• Risk list views (open, in progress, on hold, closed, overdue, due today, assigned to me) with search, cards, and Export CSV
• Role-based navigation for app administrators, risk managers, and risk owners
• Comments, activity history, attachments, and risk ID numbering
• Custom New / Edit / Display forms plus field display-name overrides
• Lookup administration for categories, business units, response, profile, strategy, impact, and likelihood
• Excel / CSV import to migrate lists from Risk Matrix (Pro)
• Configurable appearance, form templates, notifications, subscription, and language (English, Spanish, French, German)

Microsoft Teams Integration

After deployment, administrators can use Sync to Teams from the SharePoint App Catalog to make the solution available in Microsoft Teams as a personal app or channel tab. Users work the same risk queues, rating page, and dashboards inside Teams - while SharePoint Online remains the system of record.

Email Notifications

Risk Matrix 365 supports flexible notification delivery. Choose the option that best fits your environment in Settings → Email Integration:

• Microsoft Graph (tenant-resident, default): Notifications are sent from the signed-in user's Exchange Online mailbox. A tenant administrator approves Microsoft Graph Mail.Send once in SharePoint Admin Center → API access. Mail never leaves your Microsoft 365 tenant.
• Chronodat Mail API (optional): Chronodat's hosted mail service sends notifications with zero tenant configuration. Requires an active Chronodat subscription. When enabled, notification recipients, subject, and message body are transmitted to the Chronodat mail service.
• Power Automate (advanced): Not shipped with the product. You build and configure your own flows. No Mail.Send approval is required in this mode.

The app installs and runs without configuring email; only workflow notifications require a delivery option.

Security & Data Residency

• 100% tenant-resident risk data: Risks, comments, lookups, form layout, and settings are stored in standard SharePoint lists (RMT_*) inside your Microsoft 365 tenant
• No external data transfer by default: Default Microsoft Graph delivery keeps notification email inside your tenant
• Microsoft 365 security inherited: Uses SharePoint permissions, Microsoft Entra ID authentication, conditional access, and DLP policies
• You own the data: Uninstalling leaves your SharePoint lists and data intact

Component Information (SPFx component types in this package)

• Client-side web part - "Risk Matrix 365" - for modern SharePoint pages and (via Sync to Teams) Microsoft Teams channel tabs and personal apps
• Full-page app - the same "Risk Matrix 365" web part published as a SharePoint full-page application (SharePointFullPage host) for a dedicated risk-management workspace

Prerequisites

• Microsoft 365 with SharePoint Online (SharePoint Server / on-premises is not supported)
• Tenant administrator permissions to deploy SPFx solutions to the app catalog
• Modern SharePoint sites
• Microsoft Exchange Online mailboxes (for Microsoft Graph workflow email notifications)
• Microsoft Teams (optional) for Teams integration

Recommended Browsers

• Microsoft Edge
• Google Chrome

Subscription

One subscription is required per SharePoint site. The 14-day free trial can be converted to a yearly plan from Settings → Subscription or the billing portal.

Get Started

Click Get it now to start your fully featured 14-day free trial. Deploy the solution to your Microsoft 365 tenant App Catalog, add the web part to a SharePoint page (or publish as a full-page app), and launch the built-in setup wizard. After the trial period, the subscription is $499 per site per year, with unlimited users on the licensed site.

Help & Support

Product pageKnowledge baseSupport