Everything we hold on you, and the reason for each bit.

Who answers for it

SecureOps Solutions is one of the brands run by Fortify 24x7, and answerability for everything on this page rests there. Write to support@secureopssolutions.com about any of it and the message lands with people able to act.

What the shop front itself picks up

This is a shop, not a data gathering exercise. No advertising network runs on it, no tracking pixel sits in it, and nothing gets passed to anybody.

• Lines you add to the board live in your own browser, in local storage, until you clear them or check out. Before checkout they never travel to us.
• Ordinary web server records exist, carrying an address and a time. They keep the site standing up and serve no other purpose.
• Card details go into Stripe. Nothing that looks like a card number ever touches this site.

What a purchase records

Checkout creates an account: the address used, the firm named, the lines and counts bought, and whatever billing record Stripe hands back. That is the least needed to provision the service and bill for it, and it is used for those two things.

What the products themselves handle

Here is the part most privacy pages skip past. Watching your machines means the products under this brand handle genuine information about your firm.

• Detection reads process activity, file paths, network destinations and authentication events on whatever you enrol.
• Mail cover reads headers, message content and attachments inside the tenant you connect, because ruling on a message requires reading it.
• Discovery reads file contents on enrolled devices in order to locate regulated material and count it.
• Backup keeps copies of what you nominate, which by design puts your material with a processor.

Engineers open a specific record when a callout or an investigation calls for it, and that access is written down. Nobody browses your material out of interest, nothing here trains a model, and nobody sells any of it.

Callouts you raise

A callout carries your name, the address it came from, what you wrote, and whatever engineers add while working it. The thread stays readable inside the portal while the account remains open.

Companies underneath us

Nobody here pretends to run all of this alone. These are the processors involved and what each one holds.

• Stripe, for payment and card storage. A full card number never reaches us.
• SentinelOne and Fluency, for detection material off enrolled machines.
• ThreatLocker, for the record of what opened and what was allowed.
• Ironscales, for mail inside the tenant you connect.
• N-able N-sight, Addigy and Zimperium, for device state and management.
• Actifile, for discovery findings and encryption records.
• N-able Cove and Dropsuite, for the backup copies themselves.

How long each thing survives

Retention follows what a thing is for, never what happens to suit us.

• Billing records survive whatever period law demands, and that is longer than anybody would choose.
• Detection material lives for whatever the line you bought specifies, settled at rollout.
• Backup copies follow the retention you picked, and go when the subscription ends and the handover window shuts.
• Callout threads last while the account does.

What you can ask of us

Ask what is held, ask for a copy, ask for a correction, or ask for deletion. Some of it we are obliged to keep; where that applies you will be told which part and under what obligation, rather than having the whole request quietly declined. Write to support@secureopssolutions.com.

Keeping it safe

Access is confined to engineers who need it, sits behind multi-factor authentication, and is logged. Backup copies are encrypted on your machines before they travel and stay encrypted where they land. If something happens that touches your information, you hear it from this room rather than from somebody else.

When this page moves

The date at the top changes whenever this page does. Anything that materially alters what happens to your information also gets an email, because a silent edit is not notice.