Stored by AppAlert
- Your account name, email address, linked organization, and membership.
- Application and enterprise application identifiers, display names, owner email addresses, credential types, expiry dates, and sync state.
- Application Proxy certificate metadata and agent identity inventory returned by the granted read-only permissions.
- Alert thresholds, notification recipients, email template settings, and notification history.
- Microsoft sign-in tokens are encrypted before the authentication system stores them.
Never stored by AppAlert
- AppAlert never stores raw secret values.
- AppAlert never stores certificate private keys.
- AppAlert never stores Microsoft account passwords.
- AppAlert does not read mailbox contents.
Why owner email addresses are stored
Owner addresses provide renewal context in the queue and support optional owner notification routing. Organization administrators control that routing in Organization Settings.