What a security review gets from us.
Somebody is going to send you a questionnaire about us. Most of it is answered by the architecture: the sensitive text never leaves the device, so the questions about how it is stored, encrypted and reached mostly stop applying.
Most of the questionnaire is about data we never receive
Where is customer data stored, how is it encrypted, who can access it, what happens in a breach — those questions get much shorter when the sensitive text never leaves the device. What the console holds is event metadata: which rule fired, what was done, on which site, from whose browser.
Every field, in fullDocuments and controls you can point a reviewer at
The security page lists every field an event carries, every permission the extension asks Chrome for, and the two companies that process anything on our behalf. The GDPR page sets out controller and processor plainly. In the console you set the retention window, export everything your organization has, and remove an admin's access immediately.
- Each organization sees only its own events, and the extension only talks to the console it was given a key for.
- Admins sign in with a one-time code to their work address; there is no shared password to leak.
Ask for what is not published here
Reviews ask for documents in their own shapes — a questionnaire in your format, a specific statement about where something runs, the terms your procurement needs to see. Send what you need and you will get a straight answer from a person, in writing, with no guessing in it.
Write to usYou get written answers from a person
Send the questionnaire and you get it back answered, with the gaps marked as gaps. What is written on these pages is what we would put in the document — if the two ever disagree, the pages are wrong and we fix them.
Write to usWorth knowing
- This page is kept in step with the product. When something changes, it changes here with it.
- Capsulla covers Chrome on managed browsers. Anything outside the browser is outside the scope of any answer we can give you.
While you are here
Stop the next leak before it leaves the browser.
Try it free for 14 days, no card needed. Start with one team and see what Capsulla catches in the first week.