Evidentia privacy policy
Last updated: 13 September 2026
This policy covers Evidentia, the Chrome and Edge extension developed and distributed by Cobaltica snc. It does not cover the cobaltica.it website, which has its own privacy policy, linked at the foot of every page.
In short: no data leaves the device the extension runs on.
Evidentia works entirely locally, inside its own pages. There are no application servers, no accounts, no synchronisation, no usage statistics, no tracking and no advertising. The versions of the documents being analysed are requested directly from the SharePoint or OneDrive for Business of the organisation you are already signed in to, and they stay in the browser's local storage. Cobaltica never receives, sees or keeps those documents, nor the data of the people who wrote them.
Evidentia is not an AI-generated content detection tool: it does not prove who wrote a text, it does not attribute the origin of content, and it does not produce suspicion scores.
Provider and contact details
Evidentia is developed and distributed by Cobaltica snc, Via La Louvière 2, 06034 Foligno (PG), Italy — VAT number IT02790300541.
For questions about this policy or about how the extension works, use the contact form at the foot of this page, call +39 0742 321231, or write to the registered address above.
Because the extension transmits nothing to Cobaltica, Cobaltica processes no personal data of its users or of third parties through Evidentia. The contact details above are there for questions: they give Cobaltica no access to the data that stays on your device.
What the extension does
Evidentia is a Chrome and Edge extension (Manifest V3) intended for teachers. It reads the version history that SharePoint and OneDrive for Business keep for a Word document and reconstructs the writing process:
- successive versions of the document;
- writing sessions;
- large insertions;
- revisions;
- how the content evolved;
- unobserved intervals, that is, periods the version history keeps no trace of.
When you open the extension on a document, Evidentia calls the SharePoint REST API of the tenant you are already signed in to, lists the available versions and downloads them for analysis. All processing happens on your device, inside the extension's pages. It is worth stating plainly what Evidentia does not do: it describes how a document took shape over time, as the version history records it, but it does not prove who wrote a text, it does not attribute the origin of content, it does not produce suspicion scores, and it is not an AI-generated content detection tool. Its results are observations about a version history, not evidence.
Data processed and purposes
Everything listed below stays on the device the extension is installed on. The "Destination" column says where it ends up: no row involves sending anything to Cobaltica or to third parties.
| Data | Purpose | Destination |
|---|---|---|
| URL of the active tab, read when you click the extension's icon | Identify the document to analyse | Stays on the device, within the extension's working session |
| List of the document's versions and their metadata: date and time, author under a pseudonymous label | Reconstruct the sequence of versions and the writing sessions | Browser local storage |
| Text extracted from the downloaded versions | Compare versions and identify large insertions, revisions and the evolution of the content | Browser local storage |
| Counts and metrics computed on the versions | Produce the measurements of the analysis, including unobserved intervals | Browser local storage |
| Extension settings | Remember your preferences between sessions | Browser local storage |
| Export files: ZIP archive, HTML report, document for conversational assistants | Deliver the analysis in a form you can consult outside the extension | Generated locally and saved wherever you save them; from that point on they are in your hands |
Data that is not processed
- No account and no sign-up: Evidentia does not ask you to register and creates no profiles.
- No credentials and no tokens: the extension does not handle passwords and stores no tokens — it uses the Microsoft 365 session already active in the browser.
- No browsing history: the only address read is that of the active tab, when you click the icon, and it serves to identify the document.
- No usage statistics, telemetry or crash reporting sent to third parties.
- No tracking, no profiling, no advertising.
- No application server and no synchronisation: there is no copy of this data anywhere else.
- No content script and no service worker: the extension injects no code into the pages you visit and does not run in the background.
Permissions requested, and why
| Permission | Why it is needed |
|---|---|
| storage | Keep locally the downloaded versions, the extracted text, the computed metrics and the extension's settings. |
| activeTab | Read the URL of the active tab at the moment you click the extension's icon, in order to identify the document to analyse. |
| Host permissions on *://*.sharepoint.com/*, *://*.sharepoint.us/* and *://*.sharepoint-df.com/* | Call the SharePoint REST API of the tenant you are already signed in to, in order to list and download the versions of the selected document. These are the domains SharePoint and OneDrive for Business live on. |
The extension declares no content script and no service worker: it does not run on other sites and is not active when you are not using it.
Exports, and the responsibility of whoever makes them
Evidentia can export an analysis in three forms: a ZIP archive, an HTML report, and a document meant to be handed to a conversational assistant. The files are generated locally, on the device, and the extension sends them nowhere.
Exports may contain the text of the documents analysed. Uploading them to an external service — a conversational assistant, cloud storage, a teaching platform, email — is an independent act of whoever exported them, taken outside the extension, and falls under their responsibility and their institution's rules. From that moment the terms and privacy policy of the chosen service apply, not this one.
Before sharing an export, then, it is worth checking what it contains and whether your institution allows it.
People other than the person using the extension
A document's version history also concerns people other than the teacher: the students who authored or co-authored it, and any other collaborators. Their data — dates, pseudonymous author labels, the text of the versions — stays on the teacher's device. Cobaltica never receives it.
The controller of those documents remains the institution — school, university, organisation — that hosts the Microsoft 365 tenant and holds the files. Evidentia is a tool that reads that material where it already is, not a service that collects it.
We therefore recommend that you:
- inform students that the version history of their work may be examined, and for what purpose;
- use the results as a basis for dialogue, not as evidence: an Evidentia analysis describes how a file took shape according to the available history — it does not say who wrote what, nor whether a text was generated by an artificial intelligence. It is a starting point for a conversation with the student, not a verdict;
- follow your institution's rules on handling student data, assessment and disputes.
Retention and deletion
Data stays in the browser's local storage for as long as the user keeps it. Cobaltica sets no retention period, because it has no way of reaching that data.
- analyses and stored data are deleted from the extension's pages;
- uninstalling Evidentia makes the browser remove the extension's local storage;
- deleting local data does not touch the documents or the version history on SharePoint and OneDrive: those stay where they are, under the institution's control;
- files already exported stay where they were saved and must be deleted by hand.
Compliance with the Chrome Web Store Limited Use policy
Evidentia's use of data complies with the Chrome Web Store Limited Use policy. In particular:
- no selling and no transfer to third parties: the data handled by Evidentia is never sold, transferred or otherwise passed to third parties, in any form;
- no use beyond the extension's single purpose: the data serves only to reconstruct and show the user the writing process of the document they chose to analyse;
- no use for creditworthiness or lending purposes: the data is never used to determine anyone's creditworthiness, nor for any purpose connected with granting loans.
Data subject rights
Regulation (EU) 2016/679 (GDPR) grants data subjects the rights set out in Articles 15-22: access, rectification, erasure, restriction, portability, objection, and the right not to be subject to automated decision-making.
These rights must be exercised towards the institution that controls the documents — the school, university or organisation hosting the Microsoft 365 tenant — because it is the institution that holds the files, the version history and the data of the people involved.
Cobaltica holds no data collected through Evidentia and would not be able to act on a request for access, rectification or erasure: on its side there is simply no archive to consult. It remains available, through the contact form or by telephone, to explain what the extension does and where the data is.
Anyone using the extension can delete local data at any time, as described under "Retention and deletion".
Minors
Evidentia is intended for teachers and other adult staff of educational institutions. It is not directed at minors and is not designed for their direct use.
The documents analysed may, however, have been written by students who are minors: that data stays on the teacher's device and never reaches Cobaltica. Processing it remains the institution's responsibility and must follow the institution's rules, including informing the data subjects and, where required, those holding parental responsibility.
Changes to this policy
If the way the extension works changes, this policy is updated before or together with the new version published on the Chrome Web Store, and the date at the top of the page changes accordingly. Earlier versions are not kept online: the text published here is the one that applies, and it can be requested through the contact form.