Privacy & data handling
A plain-language overview for the website and product. Review with counsel before public launch.
Website data
The production website should collect only information needed for contact, support, licensing and basic site operations. Configure analytics and cookies according to the tools you actually deploy.
Product data
IT Audit Factory is designed around customer-controlled assessment evidence. MSP uses a server/client architecture in which assessment clients communicate with the MSP server over HTTPS and managed PostgreSQL remains server-side.
Support data
Current support workflows are designed to sanitize locally and not automatically transmit assessment evidence, credentials, secrets or report contents. Users should review support information before sharing it.
Data retention
Customer evidence retention is governed by the product configuration and customer policy, including retention/legal-hold functions where applicable.