Legal

Privacy notice

This notice explains what this site collects and how PROVE engagement evidence is handled.

What this site collects

How we use it

Assessment evidence

During a PROVE engagement, Microsoft 365 configuration evidence is collected and processed on a JGS workstation. No tenant data is uploaded to a JGS cloud service or third-party infrastructure. Engagement evidence is retained for a maximum of 30 days following delivery unless a different period is agreed in writing.

Product limitations and standards references

PROVE provides point-in-time evidence and governance determinations. It is not a certification or legal attestation. Auditors and regulators apply independent judgment; PROVE provides defensible evidence to support that review.

PROVE evaluates tenant configurations against CIS Microsoft 365 Foundations Benchmark v6.0.1 controls. This evaluation is performed independently by JGS using CIS-published criteria. CIS makes no representations regarding the suitability of this product. It is not a CIS certification, endorsement, or audit.

Third-party services

JGS may use third-party providers for website hosting, email, scheduling, and secure transfer. Those providers process limited information only as needed to provide those services.

Sharing

JGS does not sell personal information. Information may be shared only as needed to operate the site, deliver requested services, comply with law, or protect the business.

Contact

Privacy questions: support@cloudjgs.com

Last updated: 2026-04-21