Privacy Statement

Privacy summary for the Easysoft PenTest portal, endpoint agent, and assessment reporting workflow.

Information Collected

The portal may store tenant contact information, user accounts, MFA enrollment state, audit logs, assessment configuration, asset inventory, findings, evidence, remediation workflow data, and generated reports.

Endpoint Agent Data

The ESAgent collects defensive posture and inventory information needed for authorized internal assessment, such as OS details, installed software, local security settings, service posture, open local ports, and finding evidence. It is not intended to collect user content unrelated to security posture.

Cookies

The portal uses required cookies for login sessions, MFA flow, OIDC state, and cookie preference tracking. These cookies are necessary for secure operation and are not used for advertising.

Use Of Data

Data is used to perform authorized assessments, display tenant-scoped reports, support remediation workflow, maintain auditability, troubleshoot agent communication, and improve assessment quality.

Retention And Protection

Assessment data should be retained according to the client agreement, regulatory requirements, and operational need. Portal access is protected with named users, MFA, RBAC, tenant isolation, HTTPS, audit logs, and signed agent policy responses.

Contact

Privacy or data handling questions can be sent to info@easysoftweb.com or mailed to Easysoft Integrating Technologies, Inc., 150 Motor Pkwy, Hauppauge, NY 11788.

These templates are provided for operational intake and should be reviewed by qualified counsel before use as a binding agreement.