Privacy notice

This notice explains what personal data NHI Governance ("we") handles when you visit nhigovernance.org or contact us, why, and what your choices are.

What we collect

When you browse

This website uses no cookies, no analytics and no third-party trackers, and loads nothing from other websites. Our web servers process your IP address and the pages you request in order to deliver them and to protect the service from abuse.

When you use the contact form

We receive the name, email address, company, role, topic and message you enter, and your IP address. We use your IP address only to limit abuse of the form; it is included in the message our team receives.

Why we use it

• To reply to your message and continue the conversation you started (our legitimate interest in responding, or steps you ask us to take before a contract).
• To keep the website and form secure, for example by rate-limiting submissions (our legitimate interest in security).

We do not sell your data, use it for advertising, or add you to marketing lists without your consent.

Who processes it for us

Messages from the contact form are delivered by email through Brevo (Sendinblue SAS), our email delivery provider, and then held in our email system. The website runs on infrastructure we operate in Microsoft Azure.

How long we keep it

We keep contact messages for as long as needed to handle your request and any relationship that follows, and delete them when they are no longer needed. Security logs are kept only as long as needed to protect the service.

Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data, to object to or restrict its use, and to complain to a data protection authority. To exercise these rights, write to hello@nhigovernance.org.

Sentinel NHI deployments

Sentinel NHI is self-hosted by our customers. Data about their agents, tools and audit records stays in their environment and is not sent to us, unless a customer chooses to share it with us for support.

Changes

If we change this notice, we will update the date at the top of this page.

Draft for legal review: the legal entity, registered address, governing data protection law and retention periods should be confirmed before publication.