Section L1 · Legal

Privacy.

The short version: we collect what we need to run the engagement, we don’t sell anything to anyone, and we tell clients before we hand data to a subprocessor.

Last updated · May 2026

What we collect

Account contact information, the asset and identity inventory required to manage your environment, ticket history, telemetry from monitoring agents we install with your consent, and call recordings only when both parties opt in. We don’t collect anything we don’t use.

What we don’t do

We don’t sell, rent, or trade client data. We don’t share it with marketing partners. We don’t use it to train models. The only third parties who see your data are the named subprocessors listed in your MSA appendix.

How long we keep things

Ticket and telemetry data: 24 months unless your contract specifies otherwise. Backups: per the retention schedule we agreed in writing — typically 35 days operational + 7 years archive for HIPAA / SOX / SEC clients.

Questions

Write to privacy@hightrustit.com — replies within five business days. Data subject requests acknowledged within seventy-two hours.