Security and data residency
Read-only access, isolated per customer, hosted in the UAE.
Mito is built so you never have to trust us with the keys. Here is how access, isolation and data residency work.
Security and data residency
Built so you never have to trust us with the keys.
-
Read-only by design
Mito uses an app registration in your tenant with read-only Microsoft Graph permissions and the Global Reader role. It cannot change any setting, mailbox or file.
-
Revoke any time
The app registration lives in your tenant. Delete it and Mito's access ends immediately. No ticket, no notice period.
-
Data stays in the UAE
Assessments run and results are stored in Microsoft Azure UAE North.
-
Isolated per customer
Each customer's assessment runs in its own isolated environment. Credentials are never stored in the database.
FAQ
Security questions.
Can Mito change anything in my tenant?
No. Mito's app registration has read-only Microsoft Graph permissions and the Global Reader role. It can read configuration; it cannot write, delete or send anything.
Where is my data stored?
In Microsoft Azure UAE North. Assessments run there and results are stored there.
How do we stop using Mito?
Delete the Mito app registration from your tenant. Access ends immediately.
See your own tenant through Mito.
Book a short demo. We will walk through a real report and answer your security team's questions.
Or email us at mito@virtualpetals.com