Our security posture in one paragraph
Olyteck Cyber is a Microsoft 365 security posture scanner hosted in the European Union. We authenticate users through your own Microsoft Entra ID tenant, read configuration and permission metadata through Microsoft Graph, and store only the aggregate findings on our servers — the detailed evidence behind each finding stays in your administrator's browser. We do not read message bodies, file contents, or attachments. Every transit uses TLS 1.2 or higher, every byte at rest is encrypted with AES-256, and access by Olyteck staff is restricted to a small set of named operators and logged.
Documents
Public documents are available below. Documents marked NDA are released to qualified prospects and customers after a mutual non-disclosure agreement.
Public
Available under NDA
Certifications & assurance
Where we are today and what we are working toward.
Verify our STAR listing directly at cloudsecurityalliance.org/star/registry/olyteck. Submitted CAIQ v4.0.3 available on request.
Sub-processors
Carefully selected, contractually bound. Last reviewed May 2026.
| Sub-processor | Service | Region |
|---|---|---|
| Microsoft Corporation | Microsoft Entra ID authentication + Microsoft Graph (customer-controlled tenant) | Customer-controlled |
| EU cloud hosting provider | Infrastructure-as-a-service hosting of application, database, backups | European Union (France) |
| Stripe Payments Europe, Ltd. | Card payment processing & subscription billing | European Union / Ireland |
| Microsoft 365 (Exchange Online) | Transactional & notification e-mail delivery | European Union |
| Cloudflare, Inc. | DNS & edge protection for the public marketing surface | Global (with EU PoPs) |
Subscribe to sub-processor change notifications to receive 30-day notice of any material change.
Status & incident response
Live system status is published at status.olyteck.com (going live in Phase 2). Customers are notified of personal-data incidents without undue delay and within 72 hours, in line with GDPR Article 33.
Report a security issue
Customers and third parties can report a suspected security issue to support@olyteck.com. We acknowledge receipt within one business day and engage a responder.
Talk to us
Need a vendor security questionnaire filled in?
We pre-write most answers. Send us your template and we usually return it inside two business days.
support@olyteck.comSign an NDA & get the full pack
Detailed S-SDLC, pentest summary, BCP exercise report, full architecture diagrams.
Request the pack