Privacy Policy

How Autopilot Monitor handles data.

Data Collection

This service collects and processes the following data to provide monitoring functionality:

  • Device hardware information (manufacturer, model, serial number)
  • Autopilot provisioning session data (status, events, timestamps)
  • Azure AD/Entra ID tenant information
  • User authentication information (UPN, display name, tenant ID)
  • Operational telemetry and audit logs

Data Storage & Security

We implement security measures on a best-effort basis:

  • Multi-tenant architecture with tenant isolation
  • JWT-based authentication and authorization
  • Certificate validation for device agent connections
  • Encrypted data transmission (HTTPS/WSS)
  • PII logging disabled in production environments

Data Retention

Data retention is configurable per tenant. The default retention period is 90 days.

Data Sharing

Your data is not shared with third parties. Access is restricted to:

  • Authenticated users within your tenant
  • Galactic Administrators (for platform operations and support)

Your Rights

As this is a lab environment operated under best-effort principles, formal data subject rights (access, deletion, portability) are not guaranteed. However, we will make reasonable efforts to accommodate such requests on a case-by-case basis.