Security Overview
Read-only workload connectors, strict tenant isolation, signed callbacks, validated webhooks, and deterministic event processing.
Trust Center
Inspect the controls before you grant access.
ChangeWitness publishes its permission model, data flow, hosting placement, retention defaults, processor exceptions, reliability targets, and legal drafts in one public location.
Architecture
A narrow, source-backed data flow.
01
Microsoft Sources
Read audit records or receive validated change notifications.
02
Normalize
Persist only the least data required for supported outcomes.
03
Match
Evaluate deterministic, versioned rules against canonical events.
04
Deliver
Route the same correlated change to configured destinations.
Trust Documents
Public policies and operational disclosures.
Subprocessors
Core providers, processing purposes, regions, and disclosed exceptions.
Hosting
Frankfurt placement, global delivery behavior, backups, logs, and transfers.
Data Processing Addendum
Draft controller and processor terms pending qualified legal review.
Privacy
Stored data, raw payload handling, retention, rights, and deletion.
Terms
Service, plans, acceptable use, termination, and draft legal terms.
Service Status
Product-controlled SLOs and current status-page rollout.
Security Summary
Control areas published at launch.
Exact Permissions
Separate Entra, Intune, and Teams connector applications with workload-specific Microsoft Graph application permissions.
Data Retention
Plan-based normalized history, bounded deduplication keys, 365-day product audit logs, and a 24-hour maximum for dead-letter raw payloads.
Encryption
TLS 1.2 or newer, encryption at rest, certificate-based connector authentication, and envelope encryption for destination secrets.
Backup and Recovery
Provider-managed backup behavior is documented with regions still requiring final production confirmation.
Incident Response
Detection, containment, communication, recovery, and post-incident review procedures are part of the operational launch gate.
Vulnerability Disclosure
Report suspected vulnerabilities to [SECURITY EMAIL]. The security mailbox is pending setup confirmation.
Business Continuity
Durable queueing, idempotent processing, provider health monitoring, and documented recovery procedures support continuity.
Certification Status
No security certification is claimed. Any future certification will be named only after it is achieved.
Change Log
A public product and trust change log is planned for launch. [PENDING PRODUCT SETUP]