1. Scope
This notice applies to the SecuraVouch Credential Assurance product, its public product website, Microsoft Teams integration, subscription activation and related support services provided under the securagen.ai brand.
2. Roles and customer context
Depending on the deployment and applicable agreement, the customer organization may determine the purposes and configuration of organizational data processed through SecuraVouch. securagen.ai processes data as required to provide, secure, support and administer the service and as otherwise described in the applicable agreement.
3. Data processed by SecuraVouch
Depending on product configuration and workflow, SecuraVouch may process:
- Account and identity data: Microsoft Entra tenant identifiers, user/object identifiers, display name, role information and authentication context required for sign-in and authorization.
- Microsoft Teams context: meeting identifiers, organizer context, internal meeting-session identifiers and participant information required for supported assurance workflows.
- Protected reference data: selected external meeting and participant references stored in protected form where persistence is required.
- Protected-action data: action details, authority decisions, policy information, state transitions, permits and related evidence.
- Audit and security data: timestamps, actor identifiers, event types, resource identifiers, diagnostic information and usage counters.
- Marketplace and licensing data: information required to resolve subscription status and user entitlement through Microsoft.
- Support data: information supplied when a customer or user requests technical or commercial assistance.
4. Authentication tokens and secrets
Authentication tokens are processed to authenticate and authorize requests. SecuraVouch is designed not to use raw bearer tokens as customer-profile data, and application logging is designed to avoid exposing bearer tokens in normal diagnostic records.
5. Purposes of processing
- Authenticate users and establish organization context.
- Apply authorization and separation-of-duty policies.
- Bind decisions to exact protected actions.
- Create and verify assurance evidence.
- Operate Microsoft Teams integration and participant workflows.
- Verify Microsoft Marketplace subscription and licensing rights.
- Detect, investigate and respond to security and reliability events.
- Provide support and meet contractual or legal obligations.
6. Microsoft services
SecuraVouch integrates with Microsoft services including Microsoft Teams, Microsoft Entra, Microsoft Graph, Microsoft Azure and Microsoft Marketplace. Data processed by Microsoft is also subject to the applicable Microsoft customer, identity, platform and marketplace terms.
7. Retention
Short-lived authorization artifacts expire according to their security policy and are not intended to provide indefinite authority. Persistent operational, audit and assurance records are retained according to the applicable customer configuration, contractual requirements, security requirements and legal obligations.
Where deletion is requested and is legally and contractually permitted, securagen.ai processes the request through the support channel described below. Certain security, evidence or transaction records may need to be retained where required by contract or law.
8. Security
SecuraVouch applies technical and organizational safeguards appropriate to the service, including identity-based authorization, protected references, cryptographic integrity controls, time-bounded authorization artifacts and security-focused logging practices.
9. Sharing and sale of personal data
securagen.ai does not sell SecuraVouch personal data or use SecuraVouch customer data for advertising. Data may be processed by service providers and Microsoft services necessary to operate the product, or disclosed where required by law or an applicable agreement.
10. Public website analytics and cookies
The initial SecuraVouch public product website is designed without advertising trackers or third-party analytics. Authentication surfaces operated by Microsoft may use cookies or similar technologies required for Microsoft identity and security functions.
11. Access, correction and deletion requests
Customers and users can submit privacy or data-rights questions through info@securagen.ai. Requests may require identity and authority verification before customer or personal data is disclosed, corrected or deleted.
12. Changes and contact
This notice may be updated when SecuraVouch functionality, data processing or legal requirements change. The current version will be published at securavouch.com/privacy/.
Contact: info@securagen.ai