How TeamDirectory Keeps Your Data Safe
What Is TeamDirectory? And How Does it Work?
TeamDirectory is a platform designed to help organizations search and navigate their workforce structure — employee profiles, departments, office locations, and more. It integrates directly with Microsoft Entra ID (formerly Azure AD) to get up-to-date organizational and employee data.
TeamDirectory does not replicate or store your employee data centrally.
All data interactions happen within your browser or the Microsoft Teams desktop app.
You remain in control.
What Data Does TeamDirectory Store?
We store only essential configuration data such as:
- Filter rules (to exclude certain people or accounts)
- Category rules (to organize your directory)
- Images linked to categories (for instance, office location photos)
How Do We Use This This Data?
- Display only: The sole purpose of data access is to render an interactive employee directory.
- Your data is never aggregated or repurposed beyond that functional goal.
- We do not share your information with third parties.
- We use Microsoft Azure infrastructure for support services (e.g., performance monitoring), but these do not involve data replication.
Infrastructure & Architecture
TeamDirectory runs securely within your browser, connecting directly to Microsoft Graph for real-time access to organization data.
Key architectural features include:
- Your data never leaves your browser — we only pass configuration settings through secure Azure services.
- We use Microsoft Front Door, Web Application Firewall (WAF), and Microsoft Defender for Cloud to protect against threats.
- Application Insights enables performance monitoring and ensures robust service quality.
This layered architecture guards against vulnerabilities and maintains high availability.
Frequently Asked Questions
Who owns the data?
You retain full ownership of all data entered or accessed via TeamDirectory or related products. We never claim it.
What happens when I cancel?
- On subscription termination, your data is retained for a short grace period (typically 30 days) to allow export or migration.
- After that, your data is securely and permanently deleted from our systems.
What security measures do you use?
We follow industry best practices:
- Encryption (both in transit and at rest)
- Secure cloud hosting
- Regular security audits
- Strict access controls
Do you share data with third parties or services?
No. Your organizational data remains private and is not shared or sold.
What is your privacy philosophy?
We request only the minimum permissions needed to run our applications. Privacy, transparency, and data control are core to our design.
Final Thoughts
TeamDirectory was built with security, privacy, and transparency at its core. We believe you should always know:
- What data is accessed.
- Where it 'lives'.
- Who (if anyone) can see or use it.
