Privacy Policy
Last updated: June 2026
Attesto is a security product operated by Dimenfinity. We collect the minimum data needed to broker and audit privileged access, we never sell your data, and we do not track you across other apps or websites.
1. Who we are
Attesto is operated by Dimenfinity ("Attesto", "we", "us"). For any privacy question, contact us at support@dimenfinity.com.
2. What we collect
Account identity (name, email) from your single sign-on provider or Sign in with Apple; enrolled device identifiers and public attestation keys; and the access requests, approvals, risk scores, and audit events you generate while using the product.
3. Cryptographic keys
Your private signing key is generated and stored only in your device's Secure Enclave. It never leaves the device and is never transmitted to us or any third party. Only the corresponding public key is shared so your signatures can be verified.
4. Location
Off by default. If you choose to opt in, an approximate location is attached only to actions you sign - as audit context, captured at signing time. Attesto never collects location in the background.
5. AI assistant
With Apple Intelligence, the AI runs on-device and your data does not leave the phone. If you configure your own AI key, your questions and ticket context are sent directly to your chosen provider (for example OpenAI, Anthropic, or Google) under your own account - not through our servers.
6. Integrations
When your organization connects Jira, ServiceNow, Okta, PagerDuty, or Teleport, we exchange only the data required to validate tickets, route approvals, and mint short-lived credentials.
7. How we use data
Solely to provide, secure, and audit the access-brokering service. No advertising. No profiling. No sale of data.
9. Retention
Audit and request records are retained for your organization's compliance needs and are deleted on account deletion.
10. Your rights
Access, correct, export, or permanently delete your data. You can delete your account, devices, and history at any time in Settings → Delete Account.
11. Security
Encryption in transit (TLS) and at rest, hardware-backed keys, and least-privilege access controls.
12. Children
Attesto is a workplace tool. It is not directed to children under the age of 16.
13. Changes
We will post updates to this policy here, with a revised "Last updated" date.
14. Contact
For any privacy question, email support@dimenfinity.com.
Proprietary notice - Patent Pending.
© 2026 Dimenfinity. This Privacy Policy and the design, layout, and copy of attesto.dev are proprietary. Unauthorized copying, scraping, reverse engineering, or redistribution is prohibited. See Terms of Use.