EntraSight uses read-only Microsoft Graph API access to scan app registration metadata. We never store client secrets, certificates, or credentials — only metadata such as expiry dates, app names, and owner information. All data is associated with your account and can be deleted upon request. For questions contact hello@entrasight.com