In order to provide this service we use a 3^rd party tool called ID Agent (part of Kaseya). ID Agent are fully compliant with the EU-US Privacy Shield.

Please note that we do not pass any personal data to ID Agent, they collect data on our behalf that is publicly available.

Data we collect:

We use the above mentioned tool, to search data that is publicly available in order to locate email addresses associated with particular domain names that may be breached and/or available for sale. This data includes:

• Email addresses
• Passwords
• Possible source of data (eg. website that was breached)

Location of data held:

The data collected, is stored within their online service in the US.

Data Usage:

• The data held is only used to inform the client of credential breaches.
• The data is never passed to any 3^rd parties.
• The data will be passed to the agreed named contact within the client organisation
• The data may be passed to a named individual (where the data relates solely to them), with permission from the agreed named contact.
• For security, we will not provide full passwords.

Data we have access to:

Named individuals within projectfive have the ability to run reports that search for breached credentials. We have full audit trails of those who have access.