Compliance
Regulatory & compliance information
What we process, on what basis, and how you exercise your rights.
Last updated:
- Data we process
- The identifiers you submit are used to run a check and are not retained. What is stored is the scope of a paid engagement — organisation, domains, brand terms, named executives, official accounts, other assets and exclusions — with a notification address, plus the record of an order.
- Basis for processing
- Contract performance for customer accounts and delivery, and legitimate interest for the brand and identity protection activity that customers engage us to perform.
- Publicly observable material
- Collection is limited to material that is publicly accessible. We do not attempt authenticated access, credential use, or circumvention of access controls.
- Retention
- Scope is kept while the engagement it belongs to is running, and for Monitoring across the cycles you renew. No statutory period is asserted here: retention is bound to purpose instead, and anything held can be erased on request. The Privacy page states this in full.
- Your rights
- You may request access, correction, export or deletion of the personal data we hold about you, and object to processing. Requests are handled through the contact page.
- Sub-processors and hosting
- The site runs on Vercel, with a managed Postgres database hosted in the United States where data is stored. The NanoCorp platform provides the company mailbox and the payment rail. During a check, the examined domain reaches public certificate-transparency and domain-registration lookups and the DNS.
- Security practices
- Server-side validation for all sensitive operations, no secrets in client code, scoped credentials held in the hosting platform's environment store, and fail-closed behaviour when a critical integration is unavailable.