So here is how we are set up, what we hold, and what happens when something goes wrong on our side. Ask for anything on this page that you cannot see and we will send it.
We try to hold as little as the job allows. Where a function can run on your side of the boundary, it does - that is why our agent classifies on-device. We minimise what leaves the device, and file contents are encrypted on the device before upload.
Affected customers are contacted within 24 hours of confirmation, with what we know at that point rather than a polished statement a week later. A written post-incident review follows within ten working days and goes on our research page alongside everything else.
Full export of your findings, evidence and logs in open formats, available for 30 days after termination, at no charge. Uninstall is a single command through your device management. We do not hold your compliance history hostage.
Send it over. We keep completed responses for the common frameworks and turn most around in two working days.