Privacy and data handling
Last updated October 5, 2026
The short version
Trimtab collects security configuration from the Windows devices you enroll so it can report on compliance. It does not collect documents, email, files, keystrokes, screenshots, or browsing activity. It does not sell data or use it for advertising.
What the agent collects
| Category | Examples |
|---|---|
| Device identity | Computer name, manufacturer, model, serial number, domain or Microsoft Entra ID tenant name |
| Operating system | Windows edition, version and build, last restart time |
| Security settings | Encryption, antivirus, firewall, password and lockout policy, screen lock, audit policy, and similar configuration values |
| Account names | Names of accounts and groups that hold local administrator rights, and the status of built-in accounts. Passwords are never collected. |
| Update history | The date and title of the most recent security update |
| Results | Pass or fail for each check, with the evidence values that led to the result |
How it is protected
- The agent only makes outbound HTTPS connections to the Trimtab service. It does not open inbound ports.
- Each device authenticates with its own token, encrypted at rest with Windows DPAPI in a folder only administrators and the system can read. Tokens can be revoked at any time.
- Results are stored in Microsoft Azure data centers in the United States.
- Dashboard access requires a password and an authenticator code.
Who can see it
Results are visible to the managed service provider or organization that enrolled the device, through the Trimtab dashboard. We access customer data only to operate and support the service, or when required by law.
Retention and deletion
Scan history is kept while the account is active so drift and trends can be shown. Customers can ask us to delete a device, a client, or all of their data by contacting us. A few recent results are also kept on each device so offline scans can be uploaded later.
This website
gettrimtab.com does not use cookies, analytics, or tracking pixels. Fonts are loaded from Google Fonts, which receives your IP address when the page loads. The Trimtab dashboard uses a single session cookie to keep you signed in.
Product update emails
If you sign up for updates, we collect your email address and, if you choose to share them, your first name and company. We use them only to send occasional news about Trimtab. Sign-ups are handled by our email provider, Kit, which stores your details and sends the emails on our behalf.
You'll be asked to confirm your subscription, and every email includes an unsubscribe link. You can also ask us to remove you at any time by emailing hello@gettrimtab.com.
Contact
Questions or deletion requests: hello@gettrimtab.com.