Privacy and data control

Your protection data belongs to you.

Undermined Audit never sells your personal data. Collection is limited to authorized protection purposes and the product explains what each permission checks before you grant it.

Purpose-limited collection

The audit collects only the information needed to complete the checks you authorize, calculate supported results, and provide the service.

Redacted evidence

Sensitive matches use safe summaries, aggregates, hashes, or sealed details instead of placing raw secrets into the default interface.

Optional connections

Microsoft and Google connections are optional, presented one account at a time, and explain what will be checked before authorization.

Export and deletion

Customers can export their account information and schedule permanent deletion from Settings with a recovery window.

No SMS

The audit uses in-app notices, meaningful email, and optional secure push notifications. SMS is not part of the notification design.

Account control

Direct customers can manage and cancel subscriptions without contacting support. MSP-funded contracts remain controlled by the paying partner.