CaseZero Privacy Statement

Effective Date: January 1, 2026 · Privacy & Security Contact: [email protected]

1. Identity Claims Collected at Sign-In

When you sign in with Microsoft Entra ID, CaseZero receives your organizational directory identifier (`tid`), immutable object identifier (`oid`), display name, and work email address to authenticate your session and enforce workspace RBAC.

2. Zero Raw PII Egress Architecture

CaseZero Protected Egress sanitizes caller names, emails, IP addresses, and secrets before incident signals leave your ServiceNow or cloud boundary. Encrypted correlation state is isolated per tenant.

3. Data Retention & Isolation

Each customer workspace is strictly partitioned by tenant ID. Audit logs and human-in-the-loop interaction records are retained according to your enterprise agreement and can be exported at any time.

4. Contact Us

Questions regarding privacy, security reviews, or data processing agreements can be sent to [email protected] or [email protected].