Cloud Cost ScannerSecurity and data
The scanner reads your Azure costs and resource settings. It cannot change, create or delete anything.
What you approve when you sign in
One delegated permission: Azure Service Management (user_impersonation). It lets the app act as you, so it can only see what your own Azure role allows. Reader or Cost Management Reader on a subscription is enough.
The app only ever sends read requests: Cost Management queries, Resource Graph queries, Azure Advisor, and lists of Azure OpenAI deployments. Every fix is something you run yourself, with the command shown.
What is stored
- Your name, email and Microsoft account ID, and the business details you give us (company, job title, phone, company size, country).
- Your Microsoft sign-in token, encrypted, so scans can run in the background and be re-run later.
- Scan results: cost totals and the list of findings. Raw billing exports are not stored.
- For paid plans, your Stripe customer ID and subscription status. Card details are handled by Stripe; we never see or store them.
Sharing
Reports are private. You can turn on a share link for one report; shared pages never show resource IDs, subscription IDs or commands, and you can turn the link off at any time.
Removing access
- Delete all your data from the Reports page at any time.
- Revoke the app in Microsoft at myapps.microsoft.com or, for admins, in Entra ID under Enterprise applications.
Full details are in our privacy policy.