If your organization’s cybersecurity or IT department requires details regarding the Ategrity Audit Portal to approve access, please provide them with the following information regarding our authentication process.

Overview of Connection

The Audit Portal uses Microsoft Graph to authenticate users. This connection is used solely for identity verification and does not share detailed internal company data.

Data and Permissions Utilized

When users log in, they are prompted to accept a connection that utilizes the following limited permissions:

• email: Allows the system to view the user's email address.

• openid: Used to sign users in.

• profile: Allows viewing of basic profile information (Name and Email).

• User.Read: Allows the system to sign the user in and read their basic profile.

Security Note: There is no exposure of any data other than your basic profile (name and email address). All authorization and access levels within the portal are managed via the email address collected during this login.

Benefits for Your IT Team

Utilizing this connection through Microsoft Entra (formerly Azure AD) provides your IT department with greater security control:

• Centralized Access Management: When an associate is disabled or terminated in your internal systems (Entra), they are automatically blocked from accessing the Ategrity Premium Audit platform.

• Reduced Risk: This prevents former employees from accessing sensitive account information in external systems after they have left your organization.