Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This is the privacy policy of Quest Software Inc. and One Identity, covering both companies' websites, SaaS products, portals, and any properties bearing their logos. The policy authorizes collection of identifiers, device data, IP addresses, call recordings, and AI-analyzed transcripts of phone calls, chatbot conversations, and sales emails, and discloses sharing of this data with approximately 30 named advertising, analytics, and marketing technology partners including Google, LinkedIn, LiveRamp, AppNexus, and theTradeDesk. The policy also states that Quest uses job applicant data including Social Security Numbers and government identifiers, and that when Quest engages third-party cloud hosting providers, it relies on those providers' public policies for data protections applied to Personal Data stored in those environments.
This Privacy Policy governs Quest Software Inc. and One Identity's collection, use, processing, transfer, and storage of Personal Data across their websites, SaaS products, and associated services, effective May 1, 2026, with stated legal bases including consent, contractual necessity, legitimate interests, and compliance obligations. The agreement states that Quest collects identifiers, device information, IP addresses, browsing and clickstream data, billing information, call recordings, AI-analyzed communications transcripts, and job applicant data including Social Security Numbers; the terms authorize sharing this data with affiliated companies, Business Partners, advertising vendors (including AdRoll, Google DoubleClick, LiveRamp, and approximately 30 named third parties), payment processors, and cloud hosting providers, and permit de-identification and aggregation of Personal Data for sharing with third parties. The document discloses AI-powered analysis of call transcripts, chatbot interactions, and sales emails for analytics, coaching, and forecasting purposes, and explicitly states that the system does not respond to browser Do Not Track signals; the policy also states that Quest relies on public policies of third-party cloud hosting providers for data protections applied to Personal Data processed in those environments, which may warrant review against applicable data protection standards. The policy asserts compliance with GDPR (via EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework), CCPA and CPRA (California residents), and the UK and Swiss extensions to the Data Privacy Framework; regulatory exposure exists under GDPR Article 13/14 disclosure obligations, CCPA/CPRA Sensitive Personal Information provisions, and FTC Act Section 5 given the breadth of advertising technology partners and AI processing disclosures.
The agreement establishes that Quest collects identifiers, device data, call recordings, AI-analyzed communication transcripts, and job applicant data including Social Security Numbers, and authorizes sharing with approximately 30 named advertising and analytics partners. Under these terms, browser Do Not Track signals are not honored, though the Cookie Preference Center and Global Privacy Control signals are acknowledged. You can submit data subject requests including access, deletion, rectification, and opt-out of marketing at https://oneidentity.com/legal/preferences.aspx, by email at privacy@quest.com, or by calling 1-888-820-4606.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
2 important changes detected
3 versions captured · Last updated: May 2026
OneLogin has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle AI Analysis of Call Recordings, Chatbot, and Sales Email Transcripts and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.