Tenant Audit
Audit data terms
How Andy Kemp Consulting Ltd collects, protects, keeps and deletes the data for your audit. Version 2026-11-01.
What is collected
The collector reads configuration from the areas approved for your audit: Entra ID, and optionally Azure and on-premises Active Directory. It only reads. It runs as the person who signs in, so it can never see more than they can, and it changes nothing in your tenant or domain.
How it is protected
Before anything leaves your machine, the collector encrypts the results to Andy Kemp Consulting’s public key. Only AKC can open the file. A plain summary is saved next to it so you can see what it contains, and the collector prints the file’s SHA-256 so you can match it to what we receive.
How to send it
Send the encrypted file with the collector’s upload option or on your invite page. Both go straight to AKC and appear in your portal. If you choose to send it any other way (email, a file share, OneDrive or SharePoint), you do so at your own risk. The file stays encrypted, but AKC can’t account for copies outside those two routes.
How long we keep it
Your reports are kept in your portal. The encrypted files you upload are kept so the results can be re-checked, then deleted 90 days after the report that covers them is published, and never later than 180 days after upload. The working copy of the data read from them is deleted 30 days after it is processed.
Deleting it sooner
The main contact for your audit can ask for the uploaded files, and the data read from them, to be deleted at any time from the portal. Your reports are not affected. Your portal shows when it’s done.
Who sees it
Andy Kemp Consulting uses the data only to produce your audit and discuss it with you. It is not sold or shared. Our privacy notice covers your contact details.
Questions: hello@andykemp.com. Andy Kemp Consulting Ltd, Edinburgh.