Export your data

An owner can request a full copy of everything Tidehawk holds about the workspace.

Before you start

You must be the owner. Admins and technicians cannot run an export.
You need your password. Tidehawk asks for it again before queuing the export.
The download link is emailed to the workspace owners, so check that the owner address is correct in Settings.

Request the export

Open Settings and go to the Data & Privacy section.
Under Export all data, select Export data.
Enter your password and select Confirm export.

The page confirms “Export queued. You will receive an email shortly.”

What happens next

A background job compiles the export, uploads it to storage in London, and emails a download link to every owner whose address is deliverable. The link is not sent to admins or technicians, because it grants access to the whole workspace.

The link expires after 30 days.

What the export contains

The export is a single JSON document covering every table that holds your workspace’s data:

Your workspace record, team members, clients and domains
Certificates, their subject alternative names and findings
Alert rules and alert events
Your audit log
Your subscription record
Support tickets and the customer-visible messages on them
Passkey metadata, such as names and last-used dates
PSA connection metadata
Erasure and subject access request history
The outbound email log and your personal watchlist

What is deliberately left out

Password hashes, two-factor secrets, passkey key material and encrypted PSA credentials are never exported. These are security artefacts rather than your personal data, and putting them in a downloadable file would turn an export into a credential leak. Internal support notes written by Tidehawk staff are also excluded.

The file declares both exclusions in a _withheld section, so you can see what was left out and why.

Very large workspaces are capped at 50,000 rows per table. If any table was clipped, the file names it in a _truncated section so you know the copy is partial.

Subject access requests

The export above is the self-service route and covers the same ground as a subject access request under UK GDPR Article 15.

If you need a formal subject access request, with the statutory one-month response deadline and a structured disclosure package, email privacy@tidehawk.co. That package arrives as a ZIP archive containing one JSON file per category plus a README data dictionary, including the record of every time a Tidehawk operator accessed your workspace and every external look-up made on your behalf. Its download link also expires after 30 days.

Other exports

For day-to-day work you may want a narrower file rather than the whole workspace. See CSV exports and Audit log.