Industry-Leading Security and Privacy Practices
PrivacyHawk's security controls are independently audited under SOC 2 Type II. PrivacyHawk Enterprise has passed the Google Workspace Marketplace and Microsoft Marketplace security reviews, and every release of the PrivacyHawk app is reviewed by Apple and Google Play.
Security and Privacy Commitments
SOC 2 Type II Audited
Security, Confidentiality, and Privacy criteria. No exceptions noted by the independent auditor.
Message Metadata Only
Enterprise scans read sender domains from message metadata. Message bodies, attachments, and subject lines are never retrieved.
No Sale of Data
PrivacyHawk does not sell the data you or your organization provide to us.
Encrypted at Rest and in Transit
AES-256 at rest, with keys managed and rotated in Google Cloud KMS. TLS 1.2 or higher in transit.
Immediate Data Deletion
Revoke access, cancel, or request deletion, and tenant data, everything derived from it, and related logs are deleted immediately, and backups within 7 days.
Access Revocable by Your Admins
Admins can disconnect PrivacyHawk at any time from the Google Admin console or the Microsoft 365 admin center.
Certified by Industry-Leading Auditors
The independent audits and platform security reviews PrivacyHawk has completed.
SOC 2 Type II
- Security, Confidentiality, and Privacy criteria
- Covers the PrivacyHawk app and PrivacyHawk Enterprise
- No exceptions noted
Google Workspace Marketplace
- OAuth app verification of requested permissions and their use
- CASA Tier 2 security assessment against the OWASP Application Security Verification Standard
Microsoft Marketplace
- Publisher verification, shown by the verified badge on the Microsoft Entra consent screen
- Microsoft Marketplace certification of the listing and offer
Apple App Store and Google Play
- Every release reviewed against each store's privacy and data-use policies before it reaches users
Permissions, Data Retrieved, and Data Stored
Google and Microsoft permissions grant access to more fields than PrivacyHawk uses. This is what each permission allows, what PrivacyHawk retrieves, and what it stores.
Google Workspace
Directory permission admin.directory.user.readonly is used only to list licensed accounts. Drive, Calendar, Contacts, Chat, and Meet are not requested.
Microsoft 365
Directory permission User.Read.All is used only to list licensed accounts.
Never Retrieved or Stored
Visible to Administrators
Administrators cannot see messages, subject lines, individual senders, or anything in an employee's personal PrivacyHawk account.
Transparency, Control, and Protection of Your Data
What We Don't Do
How We Handle Your Data
Security Documentation
The following documents are available upon request from the PrivacyHawk account team.
Report a security vulnerability to security@privacyhawk.com.
Frequently Asked Questions
Can PrivacyHawk read our employees' email?
No. The scan uses message-metadata permissions, which exclude message bodies and attachments, and PrivacyHawk retrieves only the sender's domain and the date. Message content, subject lines, attachments, and individual sender addresses are never retrieved or stored.
Why does the consent screen list more than PrivacyHawk uses?
Google and Microsoft permissions come in fixed bundles. The narrowest permission that includes the sender also covers other header fields. This page shows what each permission allows next to what PrivacyHawk retrieves and stores.
Is PrivacyHawk Enterprise used to monitor employees?
No. It reports on the third-party companies holding the organization's data, not on employee behavior. The Terms of Service prohibit using its output in hiring, compensation, discipline, or other employment decisions.
Is our data used to train AI?
Google Workspace data is never used to train, fine-tune, or evaluate any AI or machine learning model, in any form. Microsoft 365 data is used for training only in fully anonymized form, and no personally identifiable information is ever used. Neither is used for advertising or provided to third parties for model training, and third-party AI providers are contractually prohibited from training on it and may retain it only temporarily for security and abuse monitoring.
Where is our data stored, and when is it deleted?
In Google Cloud data centers in the United States, encrypted at rest and in transit. Upon revocation, a deletion request, or cancellation, tenant data, everything derived from it, and related logs are deleted immediately, and backups within 7 days.
Who is the data controller for tenant scans?
The customer organization is the data controller. PrivacyHawk acts as its processor under the Terms of Service.
Subprocessors
PrivacyHawk shares data only with the providers required to operate the service, under contractual confidentiality, security, and data protection obligations.
PrivacyHawk also sends opt-out and deletion requests, at your direction, to the companies that hold your data. This is part of the service.
A full list of subprocessors, along with change notifications, is available upon request from the PrivacyHawk account team.
.svg){kind=icon}
.svg)