How we handle your data.
Plain language. The formal DPA and Privacy Policy come with your contract; this page is current practice, stated plainly.
What we collect
opsnite collects only the data you bring into the platform plus the operational telemetry needed to run it. That includes account metadata (name, work email, role), tenant configuration, content you upload (controls, policies, evidence, contracts), and integration data you authorize us to pull from your connected systems. We do not collect personal data from your end customers unless you explicitly load it.
How we use it
We use your data to provide the service: render your tenant, run your workflows, store your evidence, generate your reports. We do not sell, license, or share your data with third parties. We do not train shared AI models on your data. Tenant data stays in your tenant.
Where it lives
Customer data is stored in AWS regions you choose at provisioning time. Default region is us-east-1; EU customers default to eu-west-1. Region pinning is available on Enterprise. We do not move customer data across regions for any operational reason.
Subprocessors
We use a small list of subprocessors to operate the platform (AWS for hosting, Cloudflare for edge, Sentry for error monitoring, Anthropic for AI features when explicitly enabled). The current list is published at https://opsnite.com/security and updated when it changes. Material changes are notified to admins 30 days in advance.
Your rights
You can export your tenant data at any time as JSON, CSV, or Parquet. Deletion is honored within 30 days of termination, with verifiable destruction certificates available on request. EU subjects have full GDPR rights including access, correction, deletion, portability, and the right to lodge a complaint with a supervisory authority.
Cookies and analytics
The marketing site at opsnite.com uses no third-party analytics. The product surfaces use first-party cookies for session management only. We do not use behavioral tracking, advertising pixels, or session-replay tools.
Contact
Privacy questions go to privacy@opsnite.com. EU representative inquiries go to the same address marked “EU Rep” in the subject line. We respond within five business days.
Last updated 2026-05-02. This page reflects current practice; the formal Data Processing Agreement and Privacy Policy are made available at contract signing. Material updates will be notified at least 30 days in advance.