Privacy Policy
This policy explains what TenantSentinel collects, what it stores, and—most importantly—what it never sees. The short version: your Microsoft 365 tenant data stays on your machine.
Your Tenant Data Stays on Your Machine
TenantSentinel products never upload your Microsoft 365 tenant data. Scans run from a desktop application on a machine you control, and all scan results, reports, evidence, and history files are written locally—for TenantSentinel Recon, to C:\ProgramData\TenantSentinel\. This data is never transmitted to TenantSentinel servers. The only network calls a scan makes are read-only requests to Microsoft.
What the Licensing Server Stores
The TenantSentinel licensing server retains only what is necessary to operate your license: your license key, Microsoft Entra tenant ID, certificate thumbprint, activation date, and the company name you provided during onboarding. No scan data, report content, or user information from your tenant is ever sent to or stored by TenantSentinel.
Onboarding Information
Free-tier, beta, and partner intake forms collect your name, company name, email address, and optional notes. This information is used solely for license issuance, onboarding communication, and service fulfillment. It is kept confidential and is never sold or shared with third parties.
Subprocessors
TenantSentinel uses a small number of trusted subprocessors to operate the service. Contact email addresses and license details are transmitted to Resend solely for the purpose of delivering license keys and transactional service communications. No customer tenant data, scan results, or report content is ever shared with any third party.
Incident Response
In the event of a security incident affecting TenantSentinel systems, affected customers will be notified within 72 hours of discovery. Notifications will describe the nature of the incident, what information may have been affected, and the steps taken to address it.
Retention and Deletion
Licensing and onboarding records are retained for the duration of the service relationship plus twelve months. You may request deletion of your onboarding information at any time by contacting TenantSentinel support. Scan data and reports exist only on your machine and are deleted when you uninstall the application.
Contact
For privacy requests or data inquiries, contact TenantSentinel support through the established onboarding channel or the email address on your license confirmation.