# Security & privacy

> What MailConnect and its Admin Center may access in your Microsoft 365 tenant, and exactly what data stays in your tenant and what reaches Pinksky.

Source: https://getmailconnect.com/docs/security/

Everything MailConnect is allowed to do in your Microsoft 365 tenant, what its
Admin Center can do there, and exactly what data stays in your tenant and what
reaches us. Written for security and IT reviewers.


## Pages in this section

- [Permissions](https://getmailconnect.com/docs/security/permissions.md): Every permission MailConnect asks for: the two Microsoft Entra apps approved at install, the Outlook add-in manifest, and the Admin Center's own app.
- [What the Admin Center can do in your tenant](https://getmailconnect.com/docs/security/admin-center-in-your-tenant.md): What the MailConnect Admin Center can read and change in your Microsoft 365 when someone signs in to it: the app it uses, every read, the writes and the log.
- [Data residency](https://getmailconnect.com/docs/security/data-residency.md): What stays in your Microsoft 365 tenant, and exactly what Pinksky receives and stores: install details, licence count, usage events and your MailConnect setup.