Banyan Security

The Banyan Security App enables you to securely access your corporate applications from any network, using any device, without a VPN.

Please note that the Banyan Security App is not a VPN Client that intercepts your network traffic nor an MDM Client that manages your device settings.

Instead, the Banyan Secure Remote Access App provides the following features:

- Device Registration - a lightweight yet secure way to register your device with your corporate IT team
- Device TrustScore - collect essential device information to ensure a healthy device posture
- Services List - list the corporate applications you can access

The Banyan Secure Remote Access App is built following these core product philosophy elements that emphasize data privacy and security:

- Read Only - only reports on device status and does not change any device settings
- User Visible - runs as a regular non-privileged application with a user interface
- Low Overhead - does not continuously monitor or silently analyze behavior on the device and so has essentially no impact on device performance.
- Report When Needed - only collects essential device information from the device and reports at relatively low frequency.

1. What is the main purpose of using VPN in the app?
The app provides secure access to enterprise resources using a Zero Trust Network Access (ZTNA) model.
It establishes a secure, encrypted tunnel (based on the WireGuard protocol) between the user’s device and the organization’s infrastructure. This tunnel is used to:
Enforce administrator-defined access policies
Protect network traffic when accessing internal services
Ensure only authenticated and authorized users can reach protected resources
The VPN functionality is not a general-purpose consumer VPN, but is limited to accessing specific enterprise services configured by the organization’s administrator.

2. What user information is the app collecting using VPN?
The VPN tunnel itself is not used to collect or sell user data. However, like any enterprise VPN or secure access solution, the system processes minimal operational metadata required to establish and maintain the connection, such as:
Device and session identifiers
Connection timestamps
Assigned IP address within the private network
Authentication status (e.g., token/session validation)
This information is not used for tracking, profiling, or advertising, and is limited strictly to enabling secure connectivity and enforcing access policies.

3. For what purposes is this information collected?
The limited connection-related information described above is used solely for:
Establishing and maintaining the secure tunnel
Authenticating the user and validating session state
Enforcing Zero Trust access policies configured by the organization
Troubleshooting connectivity issues and ensuring service reliability
No data is used for analytics unrelated to app functionality, marketing, or user tracking.

4. Will the data be shared with any third parties?
No user data is sold or shared with third parties for advertising or marketing purposes.
Connection-related metadata may be processed and stored by:
The organization’s configured backend infrastructure (e.g., Banyan/SonicWall services)
Secure cloud infrastructure providers used to operate the service
This data is used exclusively for:
Secure access control
Session management
Operational monitoring and troubleshooting
All data handling follows enterprise security and privacy standards, and access is restricted to authorized systems and administrators.