What does Vahti do?
- Analyzes security settings and events
- Identifies risks and anomalies
- Clearly shows what should be fixed
Data security is everything to us
Your data is handled with care
As a Vahti user, you always know where your data is, who has access to it and how it is used — with no ambiguity.
Vahti monitors security — not your business data
What Vahti does not do?
- Does not read your emails
- Does not access the content of your documents
- Does not make changes to your Microsoft 365 configuration
Where is the data stored and who controls it?
All customer data is processed and stored within the EU/EEA. Data is isolated per customer and is never combined with data from other customers.
You decide what Vahti has access to and which integrations are used. You can manage permissions and revoke access at any time. When your subscription ends, your data is deleted.
What data does Vahti use and how is it used?
Vahti uses data only to deliver the service. We do not use customer data for other purposes or share it without a valid reason.
Vahti’s analysis is based on security-related metadata from your Microsoft 365 environment. In practice, this includes data such as sign-in activity, access permissions, application consents and security settings — not the content of emails or files.
- Access is limited to the minimum required (least privilege)
- Data is used only to identify security risks
- All actions are traceable and auditable
Your data is protected throughout its lifecycle
All data is encrypted in transit
Data is stored encrypted
Access to data is restricted and monitored
Risk detection is based on evidence and rules
Vahti identifies security risks in your Microsoft 365 environment using the data it collects and predefined rules. Risk findings and their severity are not based on generative AI assessments. Every risk finding has a traceable basis.
AI helps you understand findings and act on them. You decide which actions to take.
How does Vahti identify risks?
- Analyses security settings, access permissions and events in your environment
- Identifies risks and determines their severity using predefined rules
- Provides the evidence behind each risk finding
How is AI used?
- Explains findings and what they mean in clear language
- Answers questions and helps you work through remediation instructions
- Does not create or modify risk findings or make changes to your Microsoft 365 environment
Agreements and data protection
Using Vahti is based on clear and transparent agreements.
- Privacy Policy
- Terms of Service
- Data Processing Agreement (DPA)
- Subprocessors
- Microsoft App Compliance
If necessary, we can provide more detailed documentation regarding, for example, Microsoft 365 permissions, the data map, operator and support access, security responses, and the technical service description.