← Baseline

Privacy Policy

Last updated: 9 August 2026

Baseline is an engagement-management and risk-register application operated by Catalyst Logic. It is built so that your data never leaves your own Microsoft 365 tenant.

What we collect

Nothing. Baseline runs entirely in your browser and communicates directly with Microsoft 365 (Microsoft Graph) using your own signed-in account. Catalyst Logic operates no servers that receive, store, or process your data. Specifically, we do not collect, transmit, or store:

Where your data lives

All records are stored as files in your organisation's Microsoft 365 environment (Teams/SharePoint), governed by your organisation's own access controls, retention policies, and Microsoft's terms. Access is controlled by your Microsoft 365 team and channel membership — Baseline adds no access of its own.

Sign-in

Sign-in uses your organisation's Microsoft Entra ID. Authentication happens between your browser and Microsoft; Catalyst Logic never sees your password or tokens. The permissions the application requests are shown by Microsoft at consent time and are used solely to read and write the files the application manages on your behalf.

Hosting

The application is served as static files. The hosting provider (Microsoft Azure) may log standard web-server request metadata (such as IP addresses) as part of operating the service; Catalyst Logic does not use such logs to identify users.

Contact

Privacy questions: privacy@catalystlogic.com.au