Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This is the privacy policy of Quest Software Inc. and One Identity, covering both companies' websites, SaaS products, portals, and any properties bearing their logos. The policy authorizes collection of identifiers, device data, IP addresses, call recordings, and AI-analyzed transcripts of phone calls, chatbot conversations, and sales emails, and discloses sharing of this data with approximately 30 named advertising, analytics, and marketing technology partners including Google, LinkedIn, LiveRamp, AppNexus, and theTradeDesk. The policy also states that Quest uses job applicant data including Social Security Numbers and government identifiers, and that when Quest engages third-party cloud hosting providers, it relies on those providers' public policies for data protections applied to Personal Data stored in those environments.
This Privacy Policy governs Quest Software Inc. and One Identity's collection, use, processing, transfer, and storage of Personal Data across their websites, SaaS products, and associated services, effective May 1, 2026, with stated legal bases including consent, contractual necessity, legitimate interests, and compliance obligations. The agreement states that Quest collects identifiers, device information, IP addresses, browsing and clickstream data, billing information, call recordings, AI-analyzed communications transcripts, and job applicant data including Social Security Numbers; the terms authorize sharing this data with affiliated companies, Business Partners, advertising vendors (including AdRoll, Google DoubleClick, LiveRamp, and approximately 30 named third parties), payment processors, and cloud hosting providers, and permit de-identification and aggregation of Personal Data for sharing with third parties. The document discloses AI-powered analysis of call transcripts, chatbot interactions, and sales emails for analytics, coaching, and forecasting purposes, and explicitly states that the system does not respond to browser Do Not Track signals; the policy also states that Quest relies on public policies of third-party cloud hosting providers for data protections applied to Personal Data processed in those environments, which may warrant review against applicable data protection standards. The policy asserts compliance with GDPR (via EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework), CCPA and CPRA (California residents), and the UK and Swiss extensions to the Data Privacy Framework; regulatory exposure exists under GDPR Article 13/14 disclosure obligations, CCPA/CPRA Sensitive Personal Information provisions, and FTC Act Section 5 given the breadth of advertising technology partners and AI processing disclosures.
The agreement establishes that Quest collects identifiers, device data, call recordings, AI-analyzed communication transcripts, and job applicant data including Social Security Numbers, and authorizes sharing with approximately 30 named advertising and analytics partners. Under these terms, browser Do Not Track signals are not honored, though the Cookie Preference Center and Global Privacy Control signals are acknowledged. You can submit data subject requests including access, deletion, rectification, and opt-out of marketing at https://oneidentity.com/legal/preferences.aspx, by email at privacy@quest.com, or by calling 1-888-820-4606.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“When we call you, we may, with your consent, record the audio and video, to optimize our interactions with you, to improve our processes, and to identify coaching recommendations to our staff. We will use the data to track your …”
“Personal Data we collect may be stored and processed in the United States or any other country in which the entities represented by our affiliates, subsidiary companies or Business Partners maintain facilities. We provide appropriate levels of protection to safeguard …”
“We process your Personal Data, such as contact, job applicant data and biographical data, to assess your application and to evaluate and improve our recruitment system, our application tracking and our recruitment activities. You may also provide us with sensitive …”
“When we do engage third party providers for various services, including cloud hosting services for certain aspects of our offerings, we rely on the public policies and protections of those globally available services for the protections we apply to your …”
“Quest uses Google Analytics and services like AdRoll to advertise online. Third-party vendors, including Google, show our ads on sites across the Internet. Quest and third-party vendors, including Google, use first-party cookies (such as the Google Analytics cookie) and third-party …”
“We may aggregate or de-identify information (including Personal Data) so that it does not identify you and then share that de-identified (and therefore no longer personal) data with third parties, either on its own or with other non-personal data.”
“Our system does not respond to web browser "do not track" signals at this time. If we do so in the future, we will describe how we do so in this Privacy Policy.”
“You may choose to receive or not receive marketing communications from us by indicating your preferences on this Website. If you would prefer not to receive future marketing communications or wish to change or modify information previously provided or delete …”
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle AI Analysis of Call Recordings, Chatbot, and Sales Email Transcripts and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.