Data Security & Privacy

[thomor21]

I have become aware of the CA Documenter tool and would like to use it for our tenant.
I work for a German financial institution and need to clarify a few questions about your tool before using it.

• Does our data remain exclusively in our tenant or does any of it leave our tenant when CA Documenter is used?
• Does the CA Documenter have read-only access to our tenant?
• Which specific technology is used in the background to create the presentations?
• Can any data fragments remain in our tenant?
• Does the CA Documenter leave behind changes or log files that could give an attacker clues to launch an attack on our tenant?

[rsmichovic-ext93386]

I have become aware of the CA Documenter tool and would like to use it for our tenant. I work for a German financial institution and need to clarify a few questions about your tool before using it.

• Does our data remain exclusively in our tenant or does any of it leave our tenant when CA Documenter is used? • Does the CA Documenter have read-only access to our tenant? • Which specific technology is used in the background to create the presentations? • Can any data fragments remain in our tenant? • Does the CA Documenter leave behind changes or log files that could give an attacker clues to launch an attack on our tenant?

Exactly same questions here

[SergGu]

Hello, you can find some answers about data security in this closed issue - #12

No data is saved on the server.
When you click Generate the Web server queries Graph API to retrieve your tenants CA policies, creates the PowerPoint deck in memory and streams it down to your browser.
None of your CA policies, tokens and not even your username is stored the server.