Privacy at SigID

Privacy

Privacy follows the same trust boundaries as identity

SigID processes account identifiers, authentication and security signals, OAuth consent and application configuration, organization and tenant membership, agent identity and delegation records, billing references, operational telemetry, and audit events when those categories are needed to provide and protect the service. Authentication secrets and private key material are not exposed through public profile or discovery endpoints.

SigID acts as a controller for its own account security, billing, support, website, fraud prevention, and service-operation purposes. When a customer uses SigID to process its users’ data, the customer controls that application context and SigID acts under the applicable agreement and processing instructions. Applications receive only the claims and scopes authorized for their tenant and consent context.

People can use the Identity surface to review connected applications, sessions, profile sharing, exports, processing restrictions, and account deletion controls. Retention may continue where necessary for security logs, tax records, dispute handling, legal preservation, backups, and fraud prevention. The complete policy describes lawful bases, disclosures, international transfers, retention, user rights, cookies, automated security decisions, and contact routes.