PERSONALLY IDENTIFIABLE INFORMATION

Three fields, all of them configurable.

BlackFog was designed as an on-device application. Analysis happens on the endpoint, no PII is sent to our servers by default, and the enterprise console records only what is needed to attribute a security exception.

Processing location

On the device. No data needs to be processed on remote servers.

PII sent by default

None. Remote geolocation services run, but that activity is not recorded.

Where data is held

In the country of origin, replicated across regions for redundancy and backup.

on this page

What PII is

On-device by design

What the console records

Data sovereignty

01

What PII is

Personally identifiable information is any data that could potentially identify an individual. That includes any information which, used on its own or grouped with other information, identifies a person.

02

On-device by design

BlackFog has been specifically designed as an on-device application and does not send any PII to its servers by default. All data processing is performed on the device, and no data needs to be processed on remote servers. BlackFog performs remote geolocation services, but does not record that activity.

03

What the console records

BlackFog enterprise identifies all security exceptions and correlates those findings with a centralized console. For each security exception, the following PII is recorded:

Recorded per security exception

Device username

Customer organization

Tenant group name

All other information is specific to the security exception itself and does not identify any individual.

04

Data sovereignty

All BlackFog data is maintained in the country of origin and replicated in multiple regions for redundancy and backup purposes. We also maintain strict data processing agreements on behalf of our customers and comply with data protection regulations around the globe, with the security measures, processes and policies set out in our Data Processing Agreement.

Want the detail behind this?

Our GDPR Statement covers retention in full, and the Trust Center holds every certification, subprocessor and agreement we publish.