Security

WingMarq shows the right guide automatically when someone opens a tool, while maintaining strict boundaries around user data and document access.

Architecture

The WingMarq browser extension reads the page URL only — it uses this to determine whether a matching guide exists. It does not access page content, form data, cookies, or any other information on the page.

• • No document content is accessed or transmitted
• • The extension reads the page URL only — nothing else
• • Guides are loaded from trusted URLs configured by the workspace

Data handling

WingMarq stores minimal operational data required to manage workspaces, Marqs and usage analytics.

• • Workspace configuration
• • Marq configurations
• • Aggregated usage analytics

What WingMarq does not access

• • Microsoft 365 documents
• • SharePoint files
• • Email content
• • Teams messages

Responsible disclosure

If you discover a security vulnerability please report it to security@wingmarq.com.