The short version
To give you an account we hold your work email address. Beyond that we keep only a minimal record that a workflow ran and when it is due — a random reference and some dates, with nothing you typed in it — and a record that you accepted these documents, saying which versions and when.
The case details you enter while working stay on your device and are handed to your own email app when you choose to send something. They are not uploaded to us, and we cannot read them.
We do not use advertising or third-party analytics, we do not track you across apps or websites, and we do not sell or share your information with anyone.
Who we are
DEVI publishes digital forensics research and builds tools for forensic examiners, including digital forensics workflow software. DEVI is the controller of the limited account information described below.
You can reach us at contact@deviops.app with any question about this policy or about information held about you.
DEVI Digital Operations is licensed to organizations, and accounts are created by an administrator at your organization. If you are a user, that administrator decides whether you have an account and can remove it.
What we collect
Account information
When an administrator creates your account we store:
- Your email address. It is your username and the address your sign-in details are sent to.
- Authentication data — a securely hashed password, and, if you choose to enable a passkey, the public half of that credential. The private half never leaves your device and we never see it.
- Sign-in records kept by our identity provider, such as the time of a sign-in attempt and whether it succeeded. These exist so that misuse of an account can be detected and investigated.
This information is held on servers in the United States, under our control. We do not store your name, phone number, badge or payroll number, photograph, or location.
Information you enter while working
The details you type into the app while working through a task — including anything you record about a device, an item, a case or an incident — are held in memory on your device for as long as you are working, and are discarded when you finish or leave. They are not written to a server, and they are not sent to us.
When the app prepares a message for you, it hands that message to your own email app. Whether it is sent, and to whom, is your decision, and the message then travels through your organization's mail system — not through ours. Because of this, the content of that message is subject to your organization's own policies and records retention, and we have no copy of it.
Workflow records
When you finish a task that starts a return clock, we record that the task happened. That record contains a randomly generated reference, the account it belongs to, your organization, which workflow it was, its status, and the dates it was created, is due, and was completed.
It deliberately contains nothing you typed. Not the case number, not the device, not where it is stored, not the authority you relied on. The reference is random rather than derived from anything about the case, so it cannot be worked backwards. The record exists so the app can remind you that an item is due back, and it holds the minimum needed to do that.
Your acceptance of these documents
When you accept the Terms of Service and this policy in the app, we record that you did: your account, the version of each document you were shown, and the date and time. Accepting a new version adds a record rather than replacing the previous one, so the history of what you agreed to is kept.
That record deliberately contains nothing else. Not your IP address, not a device identifier, not a location, not which app version you were running. The record exists so that you and your organization can establish what you agreed to, and it holds the minimum needed to do that.
Preferences saved on your device
A small number of settings you choose — such as the details you would otherwise retype on every request — are saved on your device so you do not have to enter them repeatedly. They stay on the device and are removed when you sign out or delete the app.
The website
deviops.app is a static site. It does not set advertising or tracking cookies and does not profile visitors. Our hosting provider processes standard server request data, including IP addresses, to serve the site securely and to mitigate abuse.
The installer and the portable zip are available only after you sign in. The browser sends a short-lived sign-in cookie with that file request, and only to the download address. That cookie is not used for advertising or tracking.
Choosing a DEVI Validate download sends this site the tool name, whether the file is the installer or the portable zip, and the version. That notice has no account, no email address, and no identifier, and it is not sent to an analytics company.
When you download a tool file while signed in, the download is recorded in your account's download history: the tool, the version, whether it was the installer or the zip, when you first and last downloaded it, and how many times. Only you can see that history, on the account page, where you can clear it, and the site uses it to tell you when a newer version is out. A retried download is noted briefly so that it is counted once. The public count for each tool is a single total with no account attached.
Reviews, replies, and feature requests you post on deviops.app are public and show your display name, and the verified examiner badge if you have it. Your email address is never shown with them. Votes on feature requests are counted, and who voted is not shown. If you delete your account, your reviews, replies, feature requests, and votes are removed. A reply of yours that someone else answered stays in place marked as deleted, with no name and no text, so their answer still makes sense.
The Digital Forensics search runs entirely in your browser. The site
downloads one index file and matches your terms against it on your own
machine; there is no search server, and what you type is not sent to us, to
our hosting provider, or to anyone else. When you search from the home page,
your terms are carried to the research page in the fragment of the address
— the part after the #, which browsers never transmit.
Nothing you search for appears in any log we or our hosting provider keep.
If you use the newsletter form, the store keeps the email address, the time it was stored, the page the form names as its source, a status of subscribed, and an unsubscribe token. The source is the home page, the newsletter page, or a tool page. The hidden field on the form is not stored. A separate row counts signup attempts for a short window. That row's key is a hash of the network address plus the window, and the row expires. The network address is not kept on the subscriber record.
A website account
You can create an account on deviops.app and sign in at login.deviops.app. The account record keeps your email address, a display name if you set one, the sign-in methods on the account, and whether tool release alerts are on. You can change the display name on the account page. Changing the email address sends a confirmation code to the new address. You can change the password, and you can sign in with a passkey, from the sign-in pages. Creating an account subscribes you to tool release alerts. You can turn that off on the account page, or with the unsubscribe link in an alert. You can delete the account from the account page.
The sign-in session stays in this browser tab. A newsletter signup is a separate list. Joining the newsletter does not create an account, and creating an account does not add you to that list.
Email about replies and mentions. When someone replies to your review or your reply, or mentions you with @, the site can email you from accounts@deviops.app. Both are on for a new account. You can turn either off on the account page, or turn both off with the one-click unsubscribe link in every such email. These emails say who replied or mentioned you and on which page. They never include what anyone wrote. Notices are grouped, so you get at most one email every 15 minutes and a few a day. A waiting notice holds the page and the person, not your address, and is deleted once it is sent or after eight days. Your address is read from the account at the moment an email is sent.
Verified examiner badge. The badge is optional. To ask for it you give a work email address and a short description of your role. The site sends a code to that address once, to confirm you can read mail there. The address itself is not stored and is never shown. What is kept is the part after the @, your role description, and the dates, and moderators see those with your display name when they decide. A person approves or denies every request. The domain alone never earns the badge. You can withdraw a request or remove the badge on the account page at any time, which deletes that record.
Deleting the account. Deleting from the account page removes the sign-in account and, with it, the display name, reviews, replies, feature requests, votes, email settings, download history, and verification record, and a confirmation email goes to the account's address. @mentions of you in other people's posts stop linking to you; the words they wrote are theirs and stay. Totals that never named you, such as download counts, keep their numbers. Short-lived counters used to limit abuse expire within a day. The database behind these features keeps point-in-time backups for 35 days, so deleted records are gone from those backups within 35 days. You can also ask us to delete the account by writing to contact@deviops.app.
Account email and community email on deviops.app are sent by an email delivery provider acting on our instructions.
What we do not do
- We do not sell or rent personal information, and we never have.
- We do not share it with third parties for their own purposes.
- We do not use it for advertising, and we do not track you across apps or websites.
- We include no third-party analytics, advertising, or social media software in the app.
- We do not use your information to train machine learning models.
Why we hold what we hold
We hold account information for one reason: so that only the people your organization has authorized can open the app, and so that access can be withdrawn. We rely on our legitimate interest in securing the service, and on our contract with the organization that licenses it.
Who else is involved
We keep the number of outside parties as small as we can. By category, they are:
- Our cloud infrastructure provider — operates the servers behind the sign-in service and delivers account email. Data is held in the United States.
- Our website and DNS provider — serves this website and routes mail sent to our contact address.
These providers act on our instructions for the purposes above. They are not permitted to use your information for their own purposes. We will name the current providers to any customer or account holder who asks us at the address below.
How long we keep it
Account information is kept for as long as your account exists. When an administrator removes your account, the account record and its authentication data are deleted.
Sign-in and administrative security records are retained for up to twelve months so that suspected misuse can still be investigated, and are then deleted.
Records of your acceptance of the Terms of Service and this policy are kept, and are not expired on a schedule. They also outlive the removal of your account, which is deliberate: the record exists to establish what you agreed to, and one that disappears when an account is closed cannot do that. It holds no address and nothing about you beyond the account reference, the versions and the dates. If you want it removed, write to us at contact@deviops.app.
Information you entered while working is not retained by us at all, because we never receive it.
Security
Traffic between the app and our services is encrypted in transit. Passwords are never stored in readable form. Accounts cannot be created by the public: registration is closed, accounts are created only by an administrator, and only for addresses at a domain DEVI has approved. Password resets are performed by an administrator rather than through a self-service link, and passkeys are offered so that a password need not be typed at all. Administrative activity in our cloud account is logged.
DEVI is a workflow and reference tool. It is not a system of record, and it does not claim certifications or authorizations it has not obtained; see Security for our current position. Your organization remains responsible for how information it handles is classified, stored, and retained, including any message you choose to send from your own email account.
Your choices and rights
You can ask us to confirm what account information we hold about you, to correct it if it is wrong, or to delete it. Write to contact@deviops.app and we will respond within 30 days.
Because your account belongs to the organization that created it, we will normally direct a deletion request to your administrator, who can remove the account directly. Deleting the app from your device removes everything saved on the device.
Depending on where you live you may have additional rights under laws such as the California Consumer Privacy Act or the GDPR, including the right to object to processing and the right to complain to a supervisory authority. We do not sell or share personal information as those terms are defined under California law, so there is nothing to opt out of, and we do not discriminate against anyone for exercising a right.
Children
DEVI Digital Operations is workplace software intended for adults acting in a professional capacity. It is not directed at children, and we do not knowingly collect information from anyone under 13.
Changes to this policy
If we change this policy we will update the date at the top of this page. If a change materially affects how we handle personal information, we will tell account holders by email before it takes effect.
Contact
Questions, requests, or concerns: contact@deviops.app.