Built to be trusted with your clients’ data.
Snapshots read only what they need, never change anything, and keep as little as possible for as short a time as possible.
What we promise, in writing.
Read-only, always
No snapshot can create, change or delete anything.
Least privilege
Only the read permissions each snapshot needs.
Encrypted
HTTPS everywhere, and results encrypted at rest.
Retention you control
Reports are kept for 90 days, and longer if you choose. Delete any report at any time.
No AI on your data
Findings are calculated directly. Nothing trains a model.
Hosted in the US
Our app and database run in Oregon, USA.
Access by system.
| System | How it connects | Reads | Never touches |
|---|---|---|---|
| Microsoft 365 | Sign-in in your browser; a Global Administrator approves read-only access | Users, MFA methods, admin roles, policies, licences, domains, device versions, app access, sharing settings, usage reports, Secure Score | Email, files, chats or any setting |
| Autotask | A read-only API user you create | Companies, tickets, time entries, billing items, projects, resources | Billing changes or any record edits |
| NinjaOne | A read-only API client you create | Devices, patches, backup status | Scripts, remote access or any setting |
Straight answers.
Where is our data stored?
Snapshot results are stored in the USA (Oregon). Reports are kept for 90 days unless you choose to keep them longer. Microsoft 365 sign-in tokens stay in your browser and are never stored by us.
Can MSPSnaps read our email or documents?
No. Snapshots request no permission to read mail, files or chats.
Who can see the report?
Only your MSP team and anyone you send a share link to. A share link stops working after 30 days; the report itself stays in your account for 90 days, or longer if you keep it.
How do we remove access?
Remove the MSPSnaps app or API credentials from each tool at any time.
Found a vulnerability?
Email hello@mspsnaps.com. We respond within one business day.
Who handles your data, and where.
| Subprocessor | What it does | Where |
|---|---|---|
| Render | Hosts the MSPSnaps app and database | USA (Oregon) |
| Resend | Sends sign-in and notification emails | USA (North Virginia) |
| Webflow | Hosts this website and its forms | USA |
| Microsoft | Sign-in and Microsoft Graph, called from your browser | Microsoft cloud |
Data residency
Snapshot results are stored in the USA. If your clients need data kept in another region, talk to us before you connect them.
Ask about residency →Data processing agreement
We act as your data processor. A signed DPA is available on request.
Request the DPA →Security overview
How we connect, what we store, and how we handle incidents, in one document.
Request the overview →