> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://tieback.io/docs/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://tieback.io/docs/_mcp/server.

# Data & Privacy

> How Passport Intelligence handles visitor data, retention, and brand-scoped access, with role-aware controls and a conservative personal data posture.

Passport Intelligence is designed to give operators useful visibility into Digital Product Passport activity *without* unnecessary personal exposure. This page summarises the privacy and governance posture customers and developers should be aware of.

## Brand-Scoped Access

All Passport Intelligence surfaces are scoped to the active brand. Access to the workspace, signals, and investigation tools is governed by the platform's role model. Sensitive operations, such as triggering a manual trust recompute, are restricted to authorised roles (typically Owner and Admin).

## Retention Posture

Passport Intelligence applies finite, operationally appropriate retention windows.

| Data                   | Posture                                                                |
| ---------------------- | ---------------------------------------------------------------------- |
| **Visitor IPs**        | Masked after the defined retention window                              |
| **Engagement events**  | Retained for a finite period appropriate to operational use            |
| **Aggregated metrics** | Retained for trend analysis as part of the platform's analytical model |

The intent is to give operators a credible operational view while limiting unnecessary retention of identifying information.

## Identity Awareness Without Personal Profiling

Passport Intelligence is *identity-aware in the product sense*: it knows about products, passports, batches, and lots, not in the consumer-profiling sense. Signals are interpreted against the platform's own identity model rather than against individual consumer identities.

## Auditability

Operations performed within Passport Intelligence, including manual recomputes and investigations, fit within the platform's broader audit posture, supporting after-the-fact review where required.

## In Summary

Passport Intelligence is built to be enterprise-safe by default: brand-scoped, role-aware, identity-aware, and conservative on personal data retention.

## Related Docs

* [Passport Intelligence](/passport-intelligence/passport-intelligence)
* [Trust Signals](/passport-intelligence/trust-signals)
* [Scan Visibility](/passport-intelligence/scan-visibility)
* [Security Architecture](/getting-started/security-architecture)