Industry-Leading Security and Privacy Practices
PrivacyHawk's security controls are independently audited under SOC 2 Type II. PrivacyHawk Enterprise has passed the Google Workspace Marketplace and Microsoft Marketplace security reviews, and every release of the PrivacyHawk app is reviewed by Apple and Google Play.
Security and Privacy Commitments
SOC 2 Type II Audited
Security, Confidentiality, and Privacy criteria. No exceptions noted by the independent auditor.
Message Metadata Only
Enterprise scans read sender domains from message metadata. Message bodies, attachments, and subject lines are never retrieved.
No Sale of Data
PrivacyHawk does not sell personal or organizational data.
Encrypted at Rest and in Transit
AES-256 at rest, with keys managed and rotated in Google Cloud KMS. TLS 1.2 or higher in transit.
Immediate Data Deletion
Revoke access, cancel, or request deletion, and tenant data, everything derived from it, and related logs are deleted immediately, and backups within 7 days.
Access Revocable by Your Admins
Admins can disconnect PrivacyHawk at any time from the Google Admin console or the Microsoft 365 admin center.
Certified by Industry-Leading Auditors
The independent audits and platform security reviews PrivacyHawk has completed.
SOC 2 Type II
- Security, Confidentiality, and Privacy criteria
- Covers the PrivacyHawk app and PrivacyHawk Enterprise
- No exceptions noted
Google Workspace Marketplace
- OAuth app verification of requested permissions and their use
- CASA Tier 2 security assessment against the OWASP Application Security Verification Standard
Microsoft Marketplace
- Publisher verification, shown by the verified badge on the Microsoft Entra consent screen
- Microsoft Marketplace certification of the listing and offer
Apple App Store and Google Play
- Every release reviewed against each store's privacy and data-use policies
Permissions, Data Retrieved, and Data Stored
Google and Microsoft permissions grant access to more fields than PrivacyHawk uses. This is what each permission allows, what PrivacyHawk retrieves, and what it stores.
Google Workspace
Directory permission admin.directory.user.readonly is used only to list licensed accounts. Drive, Calendar, Contacts, Chat, and Meet are not requested.
Microsoft 365
Directory permission User.Read.All is used only to list licensed accounts.
Never Retrieved or Stored
Visible to Administrators
Administrators cannot see messages, subject lines, individual senders, or anything in an employee's personal PrivacyHawk account.
Transparency, Control, and Protection of Your Data
What We Don't Do
How We Handle Your Data
Security Documentation
The following documents are available upon request from the PrivacyHawk account team.
Report a security vulnerability to security@privacyhawk.com.
Frequently Asked Questions
Can PrivacyHawk read our employees' email?
No. The scan uses message-metadata permissions, which exclude message bodies and attachments, and PrivacyHawk retrieves only the sender's domain and the date. Message content, subject lines, attachments, and individual sender addresses are never retrieved or stored.
Why does the consent screen list more than PrivacyHawk uses?
Google and Microsoft permissions come in fixed bundles. The narrowest permission that includes the sender also covers other header fields. This page shows what each permission allows next to what PrivacyHawk retrieves and stores.
Is PrivacyHawk Enterprise used to monitor employees?
No. It reports on the third-party companies holding the organization's data, not on employee behavior. The Terms of Service prohibit using its output in hiring, compensation, discipline, or other employment decisions.
Is our data used to train AI?
Google Workspace data is never used to train, fine-tune, or evaluate any AI or machine learning model, in any form. Microsoft 365 data is used for training only in fully anonymized form, and no personally identifiable information is ever used. Neither is used for advertising or provided to third parties for model training, and third-party AI processing happens under contracts that prohibit retention and training.
Where is our data stored, and when is it deleted?
In Google Cloud data centers in the United States, encrypted at rest and in transit. Upon revocation, a deletion request, or cancellation, tenant data, everything derived from it, and related logs are deleted immediately, and backups within 7 days.
Who is the data controller for tenant scans?
The customer organization is the data controller. PrivacyHawk acts as its processor under the Terms of Service.
Subprocessors
PrivacyHawk shares data only with the providers required to operate the service, under contractual confidentiality, security, and data protection obligations.
| Provider | Purpose | Data Location | Applies To |
|---|---|---|---|
| Airbyte | Data pipeline to data warehouse | United States | App, Enterprise |
| Amplitude | Product analytics | United States | App, Enterprise |
| AnchorBrowser | Cloud browser sessions for data broker removal requests | United States | App |
| Anthropic | AI model inference (secondary) | United States | App, Enterprise |
| Apple App Store, Google Play | In-app purchases and billing | Per provider | App |
| Cloudflare | CDN, DDoS protection, traffic filtering | Global edge | App, Enterprise |
| Cyvatar | Managed security monitoring | United States | App, Enterprise |
| Google Cloud Platform (including Firebase and Vertex AI) | Hosting, storage, processing, user authentication, and AI inference (Gemini) | United States | App, Enterprise |
| IntelHawk | Breach and dark web exposure data | United States | App |
| Intercom | Customer support | United States | App, Enterprise |
| Iterable | Email and in-app messaging | United States | App |
| MongoDB Atlas | Database hosting | United States | App, Enterprise |
| OpenAI | AI model inference (secondary) | United States | App, Enterprise |
| RevenueCat | In-app subscription management | United States | App |
| Sentry | Error monitoring | United States | App, Enterprise |
| Singular | Mobile app install attribution | United States | App |
| Stripe | Web payment processing | United States | App |
PrivacyHawk also sends opt-out and deletion requests, at your direction, to the companies that hold your data. This is part of the service.
For subprocessor change notifications, contact the PrivacyHawk account team.
.svg){kind=icon}
.svg)