Data use policy

Last updated: Nov 3, 2026

---

Fluid Attacks uses the data of its clients only for vulnerability scans in the context of its service. Fluid Attacks does not use the information from its clients for other activities.

Requirements

• 183. Delete sensitive data securely
• 314. Provide processing confirmation
• 317. Allow erasure requests

Other privacy measures

• Data privacy policy
• Data retention policy
• Email obfuscation
• Employee time tracking
• Manual for the NDR
• OTR messaging
• Polygraph tests
• Project pseudonymization
• Sensitive data transmission
• Unsubscribe email
• Use of cookies
• Use of OpenAI as a subprocessor