Where your data goes, and who else can see it.
Running single sign-on for an organisation means holding the list of everyone who works there. This page says what we hold, which other companies it reaches, and how long we keep it — before you have to ask.
Who else processes your data
These are our subprocessors: the companies that handle your people’s data because we use them to run the service. We do not sell data, and nobody else receives it.
| Who | What for | What they get | Where |
|---|---|---|---|
| Cloudflare | Edge delivery, DNS, WAF, and the compute every request runs on | Every request to auth.testaract.com and console.testaract.com, including IP addresses and the contents of sign-in requests in transit | Global edge; the application container runs in Asia-Pacific |
| Neon | The Postgres database, which is the single source of truth | Everything in the inventory below: names, email addresses, password hashes, second-factor material and the audit log | AWS ap-southeast-1 (Singapore) |
| Stripe | Payment processing for the paid tiers | The billing administrator's email address and card details, which are entered on Stripe's own pages and never reach us | Global |
| Resend | Delivering invitations, password resets and billing notices | The recipient's email address, and their name where an invitation carries one | AWS ap-northeast-1 (Tokyo) |
Card details are the one thing we never hold at all: checkout and the billing portal are Stripe’s own pages, and a card number does not pass through us on its way there.
How long we keep things
Your directory
People, groups and applications are kept while your organisation exists. Deleting someone removes their account, their credentials and every session they had — immediately, not at the next sync.
Sessions and tokens
Deleted once they expire, swept hourly. Signing somebody out, or disabling them, ends what is already in flight rather than waiting for it to lapse.
Audit history
Starter 30 days, Growth 90 days, Business 365 days. The log records who did what and when, and cannot be edited by anyone — including us.
What we do not do
- We do not put trackers or advertising scripts on the pages your people sign in on. This site runs no analytics at all for visitors in the EU, the EEA or the UK.
- We do not read your audit log or your directory to build anything. Support access is a separate, authenticated surface and every action taken through it is written into your audit log with the name of the person who took it.
- We do not hold your card details, and we never see a password — only an argon2id hash of one.
Making a request
If you work at an organisation that uses Testaract, your employer controls your account and your request goes to them — they can delete an account and everything attached to it from the People page without asking us at all.
For anything else, including questions about this page, write to privacy@testaract.com. Security vulnerabilities go to security@testaract.com instead — different people, and one of them has a pager.