Privacy Policy

Our Commitment to Your Privacy

TenantSight is built on a simple principle: we only access what's needed to generate your security report, and nothing more. We're a read-only audit tool — we can't modify, delete, or access any sensitive content in your clients' environments. This policy explains exactly what that means in practice.

Your Account

To use TenantSight, you create an account with your name, email, and company name. If you're on a paid plan, your payment is processed entirely by Stripe — we never see or store your card details. You can optionally upload a company logo for white-label reports.

That's it. We keep the minimum needed to run your account.

What Happens During an Audit

When you run a security audit on a client's Microsoft 365 tenant, TenantSight reads the following via Microsoft's official Graph API:

• User accounts and their sign-in activity (to detect inactive accounts)
• MFA registration status (to identify accounts without multi-factor authentication)
• Admin role assignments (to review privileged access)
• Conditional Access policies (to check sign-in security rules)
• SharePoint folder structure and permissions (to identify who can access what)
• Licence assignments (to spot unused seats)

All of this is read-only metadata — the kind of information visible to any admin in the Microsoft 365 admin centre.

What We Cannot Access

TenantSight deliberately does not request permissions to access sensitive content. We cannot:

• Open, read, or download any files in SharePoint, OneDrive, or Teams
• Read emails or mailbox contents
• View chat messages or call recordings
• See or store any client's passwords or credentials
• Make any changes to the tenant — no creating users, modifying settings, or deleting anything

When we scan SharePoint, we see folder names and who has permission to each folder — but we never open the files inside. Think of it like reading the labels on filing cabinets without opening any drawers.

How We Protect Your Data

We take security seriously — especially given the nature of what we do:

• Encrypted connections — all traffic between your browser and TenantSight uses HTTPS
• Secure passwords — account passwords are hashed with bcrypt and can never be retrieved, even by us
• Secure sessions — login sessions use httpOnly cookies that can't be accessed by browser scripts
• No tracking — we don't use analytics cookies, advertising trackers, or any third-party tracking scripts

Your Data, Your Control

You're always in control of your data:

• Unlink a tenant — removes all audit data for that client instantly
• Delete audit reports — remove individual reports whenever you choose
• Delete your account — permanently removes everything: your account, all tenants, all reports, and all branding. This can be done from Settings at any time.
• Revoke consent — your client's admin can revoke TenantSight's access from Azure Portal at any time, instantly cutting off all access

If you cancel your subscription, your account simply moves to the Free tier. Nothing is deleted unless you choose to delete it.

Payments

Subscriptions are processed by Stripe, a PCI-DSS Level 1 certified payment processor. Your card details go directly to Stripe — TenantSight never sees, handles, or stores your payment information. See Stripe's Privacy Policy for details.

We Don't Sell Your Data

Full stop. We don't sell, rent, or share your data with anyone. The only external services involved are:

• Microsoft Graph API — to read tenant security data (with your client's explicit admin consent)
• Stripe — to process payments

No advertisers, no data brokers, no analytics companies. Your data exists solely to power your audit reports.

Updates to This Policy

If we make meaningful changes to this policy, we'll let you know via email or a notice in the dashboard. We won't quietly change the rules — transparency is the whole point.