Question 1

Do you sell or share our DNS data?

Accepted Answer

Never. Your data belongs to you alone. We monetize our technology, not your traffic. We do not share, sell, or use your DNS queries for advertising or third-party profiling.

Question 2

Where is our data stored? (Data Residency)

Accepted Answer

You choose. We have data centers globally (EU, US, UK, APAC, etc.). During deployment, you can pin your data to a specific region to ensure logs never leave your required jurisdiction, fully satisfying data sovereignty laws.

Question 3

How long do you keep our logs?

Accepted Answer

You control the retention policy. By default, we keep logs for 30 days for immediate investigation, but you can extend this to 1 year or reduce it to 24 hours depending on your compliance needs (e.g., PCI-DSS vs. GDPR).

Question 4

Is the data encrypted?

Accepted Answer

Yes, at every stage. DNS traffic from the roaming agent is encrypted via DoH (DNS over HTTPS) or DoT (DNS over TLS) to prevent eavesdropping. Logs stored in our cloud are encrypted at rest using AES-256.

Question 5

Are you GDPR compliant?

Accepted Answer

Yes. We are fully GDPR compliant. We act as a Data Processor, and you are the Data Controller. We offer a standard Data Processing Agreement (DPA) and features like "log anonymization" to help you meet privacy requirements for employee monitoring.

Question 6

Can we see who accessed our logs?

Accepted Answer

Yes. Our platform includes a comprehensive audit log. You can see exactly which admin logged in, what changes they made to policies, and who viewed sensitive traffic reports, ensuring full accountability.

Question 7

How do you handle law enforcement requests?

Accepted Answer

We require a valid, binding court order to disclose any customer data. We publish a transparency report and will notify you immediately if we receive a request for your data, unless legally prohibited from doing so.

Question 8

Do you record the content of our traffic?

Accepted Answer

No. We operate at the DNS layer, which means we see the "envelope" (which domain you are visiting), not the "letter" (files, passwords, or page content). We cannot see inside your encrypted HTTPS sessions.

Question 9

What certifications do you hold?

Accepted Answer

We are SOC 2 Type II and ISO 27001 certified, ensuring our security controls are independently verified and meet the highest industry standards for availability, confidentiality, and integrity.

Question 10

If we leave, what happens to our data?

Accepted Answer

If you choose to cancel, your data is contractually deleted from our systems within 30 days. We provide a simple export tool so you can take your logs with you before the account is closed.

ThreatOrigin, In Plain English

Features

Why ThreatOrigin

Compare

Resources

Company

Features

Why ThreatOrigin

Compare

Resources

Company