Data Processing
What data CostGuard processes and for which purposes.
This page describes, in role-neutral wording, what CostGuard does with the data it receives. The exact legal roles of the parties, and any additional terms, depend on the agreement that applies to your account. This page introduces no new terms and changes nothing in an existing agreement.
Customer instructions and processing purpose
CostGuard processes data to deliver the product you configure: connecting the Azure subscriptions you authorize, importing cost and usage data, calculating summaries, and producing dashboards, recommendations, forecasts, and reports. Processing follows the configuration you set inside your workspace and the connections you authorize in Azure.
Data categories and scope
The data in scope is the data needed to run the service: account and workspace information, the Azure subscription and cost-management information you authorize CostGuard to read, and the product data that CostGuard derives from it, such as summaries, recommendations, forecasts, and report history. CostGuard is designed not to read your application secrets, your source code, or the contents of your workloads.
Access and service operation
Access to your Azure environment is read-oriented and is used to obtain cost and subscription metadata on your behalf. CostGuard is not designed to create, delete, or reconfigure your Azure resources. Internal access to customer data is limited to what is needed to operate, support, and troubleshoot the service.
Deletion, return, and limitations
You can disconnect a subscription at any time. CostGuard has no self-service account or workspace deletion today, and no automated removal process runs over your data; a deletion or return request is handled through the Contact page. Exact handling depends on the data category, the agreement that applies to your account, operational needs, and legal requirements where they apply.
What this page is not
This page is a plain-language description, not a Data Processing Addendum and not legal advice. It does not state that a data processing agreement is in place for your account, and it does not assign a controller, processor, business, or service-provider role. Any such terms come from the agreement that applies to your account.