Security
Nobody can touch a computer they are not sitting at. That is the design.
It reads the PC's health and security settings. The person at the PC can run a short list of fixes, start a Defender scan, and turn the firewall on or off. The app warns before anything risky, and anything that weakens protection shows up for the admin. Nobody can make these changes from somewhere else.
Here is exactly what it does, what it collects, and what we do not claim. 365 IT Guard is made by Zenlo Innovations & Technology LLC.
01What it can do
What the app can and cannot do.
The most useful thing to know about software on your computers is what it is able to do. So here is that, first.
What it does
- Reads the computer's health and security settings
- Shows that on the computer and reports it to your portal
- Lets the person at the computer run a short list of fixes, start a Defender scan, and turn the firewall on or off
- Answers questions through the assistant, about that computer
- Reports online status, and when it was last seen
What it cannot do
- Run arbitrary commands or scripts
- Install software, or change anything beyond that short list
- Take remote control of the computer
- Run a fix on its own, without someone clicking it
- Start a fix from the portal
Every fix is clicked by the person at the computer. Nobody, including you or us, can run anything on a computer from somewhere else.
02Collection
What leaves the computer.
This is the whole list. It does not include files, browsing history, keystrokes or the screen.
- Hardware and Windows version
- Disk use, and folder sizes when someone runs a disk scan
- Running program names and their CPU and memory use
- Installed apps
- Which apps connect to which internet services
- Windows event log errors
- Windows Security settings and Defender detections
03Access
Getting in.
Three things govern who can see your business's data, and all three are on by default rather than waiting in a settings screen.
-
Sign-in.You confirm your email when you create your account. Each time you sign in, we text a one-time code to your phone.
-
Kept separate.Access is limited to your own business, and each business's data is kept separate.
-
Checked on our servers.Our servers check every request on their own, so a modified app cannot request data outside its own business.
04Data
Data in transit, and how long we keep it.
The app and the portal talk to the same servers, and both do it over secure requests.
On the computer
Windows app
In the browser
Portal
Secure requests
History.
The portal shows the last 24 hours of CPU and memory for each computer, and keeps 14 days. Each computer keeps its own detailed history for up to 90 days, plus a weekly report. Health score, issues and online status in the portal show the current state only. Keeping history for those is on our roadmap.
If you cancel.
Your plan runs to the end of the period you've paid for. After that, monitoring pauses, but nothing is deleted. Your computers, staff and settings wait for you, and subscribing again picks up where you left off. The app on each PC stays installed and starts reporting again by itself. Your data stays with us until you remove it.
Can I delete everything?
Yes. After cancelling, an admin can remove the business from the portal. You have 30 days to change your mind.
05Payments
Card data never reaches us.
Checkout runs on Stripe's hosted payment page. You are redirected to Stripe, you pay there, and you return. Card details are handled entirely by Stripe and are never transmitted to or stored by 365 IT Guard.
This is a deliberate choice. An embedded checkout would put card handling inside our application. The hosted redirect keeps it with Stripe.
365 IT Guard
Subscription, invoices
Never sees a card number
Stripe hosted page
Card number, expiry, CVC
Entered on Stripe, stored by Stripe
06The assistant
What the assistant sees.
A direct answer to a fair question.
The question goes to OpenAI, along with a summary of that PC's health so the answer fits the actual computer. We never send files, folder paths, browsing history or passwords. Chats aren't saved on our servers, and you (the admin) can't read your staff's chats. OpenAI doesn't use this data to train its models.
- 01
You ask
A question typed into the app on your own computer.
- 02
It answers
An answer about that computer, with a one-click fix if there is one.
- 03
You click
Nothing changes until the person at the computer says yes.
Nothing runs from somewhere else
07Providers
Who else touches your data.
The services 365 IT Guard depends on.
| Provider | What it handles |
|---|---|
| Sign-in provider | Accounts, email confirmation, texted sign-in codes |
| Stripe | Payment processing and card data |
| Amazon Web Services (US West, Oregon) | Hosting and data storage |
| OpenAI | Assistant responses |
08Distribution
How you get the app.
One signed installer for everyone, from the website or the portal, run by the person at the computer.
A note on installer signing. Our Windows installer is signed, so Windows can confirm it came from us and has not been changed since we published it.
Windows also builds trust in new software over time. Because the app is new, that reputation is still building, so SmartScreen may show a warning until it does, like any new app.
The download page walks through each prompt and what to choose.
09Gaps
Where we are, honestly.
Security pages tend to imply more than they say. Here is what 365 IT Guard does not have today.
-
No SOC 2 certification or attestationWe do not hold one, and we are not claiming readiness for one.
-
No alerts yetToday you check the portal yourself. A red card tells you which computer needs attention. Email alerts are on our roadmap.
-
No Microsoft or Google sign-inAccounts are 365 IT Guard accounts.
If your business requires any of the above, 365 IT Guard is not the right purchase yet. We would rather you know that now.
10Disclosure
Found something?
If you believe you have found a security vulnerability in 365 IT Guard, contact security@365itguard.com. Our security.txt lists the same address.
Please give us reasonable time to address the issue before disclosing it publicly.
11FAQ
Security questions.
Can anyone take control of a computer?
No. Nobody, including you or us, can run anything on a computer from somewhere else.
Does the AI change anything on my computer?
Only when the person at the computer says yes. It can run a short list of everyday fixes, and nothing changes until they click. Nobody, including you or us, can run anything on a computer from somewhere else.
Can other businesses see our computers?
No. Access is limited to your own business, and each business's data is kept separate.
Do you store credit card numbers?
No. Payment is processed on Stripe's hosted page and card details never reach us.
Are you SOC 2 certified?
No. We do not hold a SOC 2 certification and we do not claim readiness for one.
Every question on this site is answered in one place. Read the full FAQ.
See it on one computer.
Nothing can be run on a computer from somewhere else, by design. Installing it on one computer is a low-risk way to see exactly what it collects and what it shows.
14-day free trial, no credit card.
Administrators can sign in to the portal.