What gets held, why, and who is allowed near it.

Clause 01Who holds it

Fortify 24x7. The storefront trades under the CyberDefense Tools name. Take every we below to mean Fortify 24x7. Ask anything at support@cyberdefense.tools and a person answers.

Clause 02What these pages record

No advertising pixels. Nothing profiled out of a visit. No marketing script borrowed from anybody.

• The roll. Chosen lines and their quantities stay in your browser, filed under cdt_cart. They travel nowhere before a checkout starts. Wipe browser storage and they are gone.
• Portal session. A token lands in your browser under cdt_portal_session so pages quit asking. Sign out and it goes.
• Request logs. Calls to billing note the ordinary technical fields, and they exist so a fault or an abuser can be chased down. No other use is made of them.

Clause 03What paying discloses

Checkout belongs to Stripe. Their page takes the number, the expiry date and the three digits. Not one of those reaches this site, appears to us, or is written anywhere in our systems.

What returns is whatever an account cannot run without. An address. The business name. Which lines, at what quantities. Whether the charge cleared. The identifiers Stripe uses for a customer and a subscription. That is the lot.

Clause 04Material the live lines touch

A live line handles material about your estate. Which material depends entirely on the line, so here it is board by board.

• Gauge set lines read process, file, network and logon activity from whatever machines and accounts fall in scope.
• Issue window records which programs were requested, by whom, and the ruling on each request.
• Delivery hatch lines examine message bodies, headers, links and attachments inside your mail platform. Rehearsal lines record who was sent one and what they did next.
• Hook board lines carry inventory, settings and patch state, plus the sites a managed device reached where web protection is switched on.
• Stamped stock lines index where sensitive material lives. Reports name devices and file paths.
• Spares cabinet lines carry copies of everything that went into scope, which is entirely the point of them.

All of it exists to run what you bought. None of it is sold, rented out, or fed to train anything.

Clause 05Dockets you open

Open a docket and we keep the subject, your words, any attachment, the address it came from, and the whole exchange after it. Support staff read that, since reading it is how a problem gets solved. Nobody else does.

Clause 06The companies underneath

Delivering this takes other companies, and you are owed the list.

• Stripe collects payment and holds the card details we never see.
• The vendor platforms named on each board hold operational material for the lines you bought, inside their own systems.
• Microsoft Azure carries the billing service and these pages.
• A mail provider moves receipts, sign in links and anything else we send.

Each one is engaged to deliver whatever you bought, and bound to use your material for that alone.

Clause 07Keeping times

• Account and billing records survive while the account lives, then as long afterward as accounting and tax rules demand.
• Docket history lasts the life of the account, because an old case is very often the shortest way through a new one.
• Backup copies follow whatever depth the line you bought carries, which is written up on its board.
• Detection and inventory material follows the retention of whichever vendor platform runs that line.
• Technical logs are held briefly, then discarded.

Clause 08Requests we accept

Write in from whatever address the account carries. Requests we accept: a copy of the material held, a correction where something reads wrong, deletion of anything we have no duty to keep, an export you can take elsewhere, an explanation of how some decision got reached. We answer. Where a thing cannot be done, you get told why instead of silence.

Clause 09How it is guarded

Encrypted on the wire and at rest. Access inside Fortify 24x7 goes by job rather than by rank, so people reach what the work needs and stop there. There are no card details on this site to steal, because none ever arrive.

Now the honest part. No arrangement is flawless, and a firm selling security should be the last to pretend otherwise. Where something goes wrong that touches your material, you hear it from us and not from somewhere else.

Clause 10Changes to this notice

When something here changes materially, the change appears on this page and the date above shifts with it. Where a live subscription is affected, it also reaches you in writing at the address on the account.