You're trusting us with your users and devices. Here's exactly how we handle that.

What we collect

• Account details for your admins and techs: name, work email, role.
• What your team puts in: tickets, assets, knowledge articles, attachments.
• Basic usage and error logs, so we can keep the service running.

What we never do

• Sell your data, or your users' data, to anyone.
• Use your tickets for advertising.
• Charge you to export your own data.

Where it lives

Everything, including backups, stays in the United States: servers in Vultr's Chicago data center, and daily backups with Backblaze in the US. Backups are kept for 30 days.

When you leave

Export everything at any time. After you cancel, you have 14 days to export, your data is then removed from our live systems, and backup copies are gone within 30 days after that. We'll confirm in writing on request.

Tenant isolation

Every organization's data is scoped to its own tenant. One customer can never see another's records.

Role-based access

Techs, managers, and admins see only what their role allows. Admin controls are protected separately.

Audit history

Changes to tickets, assets, and settings are logged with who made them and when.

Encryption

Every connection uses HTTPS, in every environment. Encryption of stored data and backups is planned, and we'll update this page when it's done.

Single sign-on

SAML and OIDC, included in every plan, so your identity provider stays in control.

Remote View, out in the open

Every remote desktop request appears on the user's screen with a reason attached, and the user can stop sharing at any time. Sessions wait for the user's approval by default; only an admin can turn on an auto-connect countdown. Details →

Service providers

The short list of third parties that touch your data, and why: Vultr (hosting), Backblaze (backups), and Microsoft 365 (email).

Found a security issue, or need our security questionnaire?

Email [email protected]. We respond within 72 hours.