Who holds your data
Fortify 24x7 operates the Red Carpet Computing brand. It is the signatory on every subscription this domain sells, and the organisation answerable for everything described below. Anything you want to raise can go to concierge@redcarpetcomputing.com, where a person and not a queue is waiting.
What we collect
Three categories, and nothing beyond them.
- Account and billing. The email address used to buy, the services and quantities on the subscription, and the payment record. Card numbers are handled by Stripe, and no part of this site or of our systems ever sees them.
- Correspondence. Anything written to us, or into a case in the portal, together with our replies. This is kept because a case history is frequently more useful a year later than it was on the day.
- Service data. What the protective platforms report while doing their job: device health, patch state, security detections, backup job results, and, where the filtering line is enabled, the web destinations a managed device reached.
What we do not collect
Being explicit about the absences matters more here than in most sectors.
- We do not read the content of your messages, documents, photographs or creative work. Detection judges how software behaves, not what you wrote.
- We do not sell, rent, or share data with advertisers, brokers, or any other customer of ours. There is no arrangement under which that could happen.
- We run no advertising or analytics trackers on these pages. The only browser storage used is your package selection and, in the portal, your sign in session.
- We do not publish, confirm, or deny who our clients are. Not to press, not to other clients, and not as a marketing reference.
The platforms that process data
Delivering these services means the platforms behind them handle data on your behalf. Each is a contracted processor operating under our instructions.
| Platform | What it handles for you |
|---|---|
| SentinelOne | Behavioural detection on protected machines |
| Fluency | Correlation of security events across mail, identity, servers and cloud |
| ThreatLocker | Which software is permitted to run on a machine |
| Ironscales | Mailbox level protection and the phishing training programme |
| N-able N-sight | Device management, patching, and web and DNS filtering |
| Addigy | Management of Apple hardware |
| Zimperium | Defence running on phones and tablets |
| Actifile | Discovery, encryption and egress control for sensitive material |
| N-able Cove | Backup of machines, virtual servers and Microsoft 365 |
| Dropsuite | Backup covering Entra ID, QuickBooks Online and Google Workspace |
| Stripe | Card payment, receipts, and the billing portal |
Where a platform is required to hold data in a particular region to work properly, we will tell you which one before you buy the line.
Discretion, specifically
Heads up: card statements show FORTIFY 24X7 - Red Carpet Computing is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.
That is a privacy feature, not an accident of billing. Nothing about the descriptor names this brand or describes the category of service, so a statement, an export, or a screenshot of a billing history reveals nothing about what was purchased.
Two further choices work the same way. Reporting recipients are set once at onboarding, so a business manager can receive invoices without receiving incidents. And the number of people at Fortify 24x7 with access to an estate is kept deliberately small, because discretion is a function of headcount as much as policy.
How long we keep it
- Billing records last as long as company and tax law insists, which is longer than anybody involved would pick.
- Case correspondence is retained while you are a client and for a period afterwards, because history explains decisions.
- Security and service telemetry follows the retention of the platform producing it, and we will tell you the figure for any specific line on request.
- Backup copies are held for as long as the line that pays for them is running. When a line stops, the copies are destroyed on the platform timetable, so retrieve anything you still want first.
What you can ask for
Write and ask us for a copy of whatever is held about you, a correction to anything wrong, deletion of what we are not obliged to keep, or an explanation of any of it in plain language. We will ask you to confirm you are who you say you are, using the account address, because the wrong answer to an identity question is the whole risk in this vertical.
Depending on where you live, local law may give you further rights. We apply the same handling to everyone rather than sorting requests by jurisdiction.
Cookies and browser storage
These pages set no advertising or analytics cookies. Two pieces of ordinary browser storage are used: the package you are assembling, so it survives moving between pages, and inside the portal a session marker, so a fresh key is not demanded on every click. Clearing browser storage removes both.
Changes to this page
If this policy changes in a way that affects what we hold or who processes it, the date at the top of this page changes and clients are told directly. We do not treat a silent edit as notice.