Skip to main content
ScopeWise
Sign in

Privacy Policy

Last updated: 20 August 2026

ScopeWise reviews the documents and detection rules you choose to share with it. This page explains what we collect, why, how it is protected, and how to get it removed. The short version: we collect only what the product needs, we never sell it, and SIEM access is always read-only.

What we collect

  • Account data: your email address and name, provided when you sign in with Google or verify an email one-time code. We do not store passwords.
  • Documents you upload for review (SOWs, RFPs, and similar), and the review results generated from them.
  • For the MITRE coverage module: detection-rule metadata pulled read-only from your SIEM (rule names, descriptions, queries, ATT&CK tags, enabled state) or uploaded as a file, and optional environment inventory you provide.
  • Basic usage analytics (page views, feature usage) via standard analytics cookies.
  • If you request a template download, the name and work email you enter are sent to us by email so we can follow up once; they are not stored in a database or shared with anyone else.

How we use it

  • To run the reviews and assessments you request, produce reports, and show your history and trends back to you.
  • Document and rule text is analyzed by AI models. Only the minimal excerpts needed for analysis are sent to our AI processing provider; your data is not used to train models by us.
  • We do not sell your data. We do not share it with third parties except the processors needed to run the service (hosting, AI analysis).

How it is protected

  • Data is stored encrypted at rest and transmitted over TLS.
  • SIEM credentials (client secrets, API tokens) are encrypted with AES-256-GCM, are write-only after saving (no endpoint ever returns them), and all SIEM access is read-only.
  • Access to your data is scoped to your organization account.

Retention and deletion

  • Your documents, assessments, and account data are retained while your account is active so your history and trends keep working.
  • You can delete individual documents and assessments in the product. To delete your account and all associated data, contact us and we will complete the deletion.

Contact

  • For any privacy question, data-deletion request, or complaint, reach us via the contact page. We respond to verified requests without undue delay.

Questions? Contact us.