Security, privacy and data protection
EffortScope is a product that processes personal data; we accepted that from the start and designed it accordingly. Below we state plainly what we read, what we don't store and where the data lives.
Microsoft 365 permissions (read-only)
Your tenant admin grants consent to the app once; EffortScope never asks for write permissions, never sends email and never creates calendar entries. When consent is requested, these are exactly the permissions you'll see on the Microsoft screen:
| Calendars.Read | Read tracked staff members' calendar events (to draft activities). |
| Mail.Read (Sent Items only) | Derive work records from sent emails; the inbox is not scanned for personal content, and attachments are read only to detect proposals/orders. |
| CallRecords.Read.All | Teams meeting attendance duration and calls without a calendar entry. |
| OnlineMeetingTranscript.Read.All | Meeting summaries if explicitly enabled; raw text is not stored. |
| User.Read.All | Staff list, department and manager chain from the directory (org chart). |
What we don't store
- Raw meeting transcript text (only the summary and an integrity trace).
- The content of meetings marked "private" — even the title is hidden from managers and AI.
- Inbox content (sent items only, to derive work records).
- Card details — held by the payment institution, they never reach us.
Where and how
- Hosting: Microsoft Azure, European Union (Germany West Central) region. Data never leaves the EU.
- Every customer (organization) is isolated at the database level: queries are automatically scoped to the tenant, and writes to another organization are rejected.
- TLS 1.2+ in transit, Azure encryption at rest; authentication is exclusively Microsoft Entra ID (we hold no passwords of our own).
- AI processing runs on Azure OpenAI (EU); your data is not used to train models.
- Audit trail: human actions (approval, correction, role change) are logged; system records are kept separately.
- Retention: configurable policies per organization; when a subscription is closed, data is deleted after 30 days.
Transparency for employees
Every user sees, in numbers, what is held about them on the "My Data" page. Reports show human approval and system stamps separately; unverified data is never presented as "approved" about anyone. For your information obligation as an employer under KVKK, we provide ready-made text (see the KVKK privacy notice).
This page is for information only; contractual terms are set out in the Terms of Service and the Data Processing Agreement.