CA Policy Manager (Publisher: Sumikko Lab)
Effective date: 2026-11-03
1.1 These Terms apply to your use of CA Policy Manager (the "Application"), published by Sumikko Lab (the "Publisher").
1.2 You may use the Application only if you agree to these Terms. If you do not agree, you may not use the Application; if you click "Do not agree", the Application will exit.
1.3 By clicking "Agree", you acknowledge that you have read and agree to these Terms.
1.4 The information the Application retrieves, stores and transmits is described in the "Application-Specific Provisions" below.
2.1 The Application is provided "as is" and "as available", without warranty of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, non-infringement, and the accuracy or completeness of any results.
2.2 You are solely responsible for your use of the Application and for any configuration changes or operational decisions made on the basis of its results.
2.3 To the maximum extent permitted by applicable law, the Publisher shall not be liable for any direct, indirect, incidental, special or consequential damages arising out of or in connection with the use of, or inability to use, the Application, except in cases of willful misconduct or gross negligence on the part of the Publisher.
2.4 Changes to external services or specifications on which the Application relies may affect how the Application behaves and the results it produces.
3.1 Use the Application only if you have the necessary authority, and only on your own organization's data or your own data.
3.2 Data retrieved, stored or exported by the Application may contain personal data. Handle it in accordance with your organization's policies and applicable law.
3.3 Do not disclose retrieved data or exported files to third parties.
3.4 Do not use the Application for unauthorized access or any other unlawful purpose.
The Publisher may revise these Terms from time to time. If a material change is made, you will be asked to agree to the revised Terms when the Application starts.
These Terms are governed by the laws of Japan. Any dispute arising out of or in connection with the Application shall be subject to the exclusive jurisdiction of the Tokyo District Court as the court of first instance.
Publisher: Sumikko Lab
Contact: support@sumikkolab.com
7.1 The Application is a Windows application that reads Conditional Access policies and sign-in logs from Microsoft Entra ID and shows how those policies apply. It is intended for administrators who manage their own organization's tenant.
7.2 The Application is read-only. It does not modify policies, settings or users. Where a change is needed, the Application only produces a proposal as text; you review and apply it yourself.
8.1 You sign in with your work or school account, and the Application reads the following from Microsoft Graph within your permissions:
(a) sign-in logs (including time, result, applied policies, IP address and location, and user and application names);
(b) Conditional Access policy definitions and named locations;
(c) users' group membership;
(d) application display names, used solely to show names on screen. This is optional; without it, all other features remain available; and
(e) user and group display names, and groups' members and parent groups, used solely to search for and check emergency access accounts and to show groups in the policy check. They are kept in this PC's memory only and are not saved. The permission to read group information (names, members, and parent groups) is optional; without it, all other features remain available.
8.2 All permissions requested are read-only.
9.1 Retrieved information is stored only on this PC, in the current Windows user's folder.
9.2 Sign-in records are stored unencrypted and contain full IP addresses (user names are hashed). There is no retention limit and nothing is deleted automatically; apart from being replaced when the same period is retrieved again, the records remain until you delete them.
9.3 User names and group membership, policy definitions, and connection settings (such as the tenant ID) are stored encrypted.
9.4 Access tokens are kept in memory only and are never written to a file.
10.1 The Application itself communicates only with Microsoft sign-in and Microsoft Graph (read-only).
10.2 The Application does not send retrieved information, usage data or error information to the Publisher or to any third party.
10.3 Operating-system mechanisms such as Windows Error Reporting are governed by your OS settings.
11.1 The results produced by the Application are estimates based on the Application's own computation. They are not an official evaluation by Microsoft and may differ from Microsoft's actual decisions.
11.2 Where the Application does not support a condition, or information could not be retrieved, the result is reported as "result cannot be confirmed" or "insufficient data".
11.3 Before changing any policy, always verify in a test environment or in report-only mode.
11.4 If emergency access IDs are configured in Settings, change proposals will include those IDs.
"Delete stored data" in Settings removes the sign-in logs, user names and membership, and policy definitions. Nothing is retrieved or stored until you agree to these Terms.
Last updated: 2026-11-03