Skip to content

How we handle your data

Testing means we may see sensitive information. These are our commitments for handling it.

[Nick: confirm each commitment and retention period before launch]
  1. 01

    Keeping evidence small

    We aim to keep only what proves a finding: for example a screenshot with personal data blurred, or a record ID instead of the record itself.

  2. 02

    Storage and access

    How findings, evidence and reports are stored and who can access them is described in your engagement agreement.

  3. 03

    AI models and your data

    Which AI providers are used on your engagement, and the data settings applied, are listed in your engagement agreement so you can review them before testing.

  4. 04

    Retention

    How long evidence and reports are kept, and how they are deleted, is agreed in your engagement agreement.

  5. 05

    Reports go only to you

    Reports and attestation letters go only to the contacts you name. You decide who else receives them, such as your auditor or insurer.

Questions: [email protected]. Website visitor data is covered by our privacy policy.