Privacy · Updated 10 November 2026
Your information. Your choices.
This notice describes the limited KnowMyRisk sign-in pilot. It does not describe a live exposure-monitoring service.
Draft for review · Publication and retention details are being finalized.
What the pilot processes
Microsoft Entra External ID and Google process the identity information needed for sign-in. KnowMyRisk uses a tenant-bound user identifier, an internal account reference, account status and server-side session records. Sign-in can include basic profile information; we do not request Gmail, Drive or contact-list permissions.
Why we process it
We use this information to authenticate your account, restrict pilot access, maintain your session and investigate sign-in problems. Your Google password is entered only with Google. Signing in does not authorize monitoring, subscription charges or access to your inbox.
Where it goes
The intended hosting platform is Microsoft Azure, with Google as an optional sign-in provider. Personal account storage is separate from the business product. We do not publish your personal account data or provide it to an employer through this pilot. No India-only residency promise is made.
Sessions and storage
The web app uses essential secure session and sign-in cookies. Access tokens remain on the server. Sessions are limited to 15 minutes and signing out revokes the app session. Provider-side sessions may remain active. The pilot does not use advertising trackers or analytics cookies.
Removal and retention
Account information is retained while your pilot account remains active. Contact support to request access, correction or removal. Minimal security and deletion-suppression records may need to be retained to prevent erased data reappearing after a backup restore. Detailed retention periods will be published before general availability.
Before monitoring is enabled
Email verification, source coverage, notification consent and monitoring retention will be explained separately. Do not submit passwords, private photos, breach dumps or other people’s personal information to this pilot.