Opsidian
Privacy

Privacy built for sensitive intelligence workflows.

Opsidian processes personal data only to provide, secure, support, and improve the platform. Customer investigation content remains customer-controlled tenant data.

Last updated: May 23, 2026

Data we process

  • Account data such as name, email address, authentication state, role, tenant membership, and security preferences.
  • Customer content such as entities, relationships, cases, incidents, source records, uploaded files, research pack status, notes, tasks, and generated reports.
  • Operational data such as audit logs, diagnostic logs, browser error reports, device metadata, and security events needed to run and protect the service.

How data is used

  • To authenticate users, enforce tenant isolation, apply roles and entitlements, and deliver the product workflows requested by each tenant.
  • To investigate support issues, detect abuse, maintain service reliability, and improve product quality using minimized operational metadata.
  • To satisfy legal, security, accounting, and contractual obligations where those obligations apply.

Sharing and subprocessors

Opsidian does not sell customer content. Data may be processed by infrastructure, authentication, hosting, observability, storage, and support providers under appropriate contractual restrictions.

Retention and deletion

  • Tenant content is retained for the subscription term unless a customer requests deletion or a signed agreement states a different schedule.
  • Deleted records may remain in backups for a limited backup retention period before aging out through normal backup rotation.
  • Audit, security, and billing records may be retained longer when required for security, legal, or compliance reasons.

Rights and requests

Customers can request access, correction, export, deletion, or restriction of personal data by contacting support. Requests involving customer-controlled investigation data may require tenant administrator approval.

Need a contractual version?

Signed order forms, DPAs, and procurement exhibits govern when they differ from public summaries.

Contact support