As a general practice, we only access and store information required for us to deliver our discount management service, which includes metadata about the types of compute resources you are running and the commitments present in your account.
The permissions you grant us to your AWS account(s) and GCP billing account(s) do not give us the ability to make changes to your applications or to view your customer data. We're granted the minimum permissions required to optimize your commitment portfolio and you have an opportunity to review the full IAM policy prior to implementing it.