How does MagicSword align with GDPR?

MagicSword aligns with GDPR through strict data minimization architecture. We collect no PII, no credentials, and no file contents. Processing environments are isolated, and defined retention policies are in place by design.

Does MagicSword collect personal data?

No. MagicSword collects only aggregated application execution telemetry, hostnames for asset identification, and policy configuration settings. We do not collect PII, credentials, file contents, browsing data, or network packet captures.

Compliance

GDPR Compliance Through Privacy by Design

MagicSword aligns with GDPR principles through data minimization architecture, no PII storage, isolated processing environments, and defined retention policies. We currently support European government customers.

What GDPR Requires

GDPR mandates data minimization, purpose limitation, and privacy-by-design principles. Organizations must demonstrate they collect only the data necessary for their stated purpose and implement appropriate technical safeguards.

How MagicSword Addresses It

What We Collect

→Aggregated application execution telemetry
→Hostnames for asset identification
→Policy configuration settings

What We Do NOT Collect

×No PII
×No credentials or passwords
×No file contents
×No user browsing data
×No network packet captures

Data MinimizationNo PIIPrivacy-by-DesignIsolated ProcessingRetention Policies

Outcomes

→Privacy-by-design architecture reduces regulatory exposure
→No PII storage simplifies compliance obligations
→Isolated processing environments for threat intelligence
→Defined retention policies across all data types
→European government customer support

Related Frameworks

SOC 2 Type II

In progress — infrastructure certified

Essential Eight

Application control maturity

NIST SP 800-53

AC-3, SI-7, AC-6, AU-2 control mapping

Relevant Industries

Healthcare & Life Sciences

HIPAA and clinical research security

Education

FERPA and student data protection

Ready to Strengthen Your Security Posture?

Deploy threat-driven application control in minutes. No specialized engineers required.