Project pseudonymization

Last updated: Nov 3, 2026

---

Each project has a pseudonym in the systems of Fluid Attacks. This gives advantages such as these:

• Employees without direct access to the project do not know the name of the client or any other information that can help them connect the project with the client.
• Internal analytics charts and other documents never use the name of the client. They use the pseudonym of the project.

Usually, only the people with a need to know the client of a project know it.

Requirements

• 300. Mask sensitive data
• 313. Inform inability to identify users

Other privacy measures

• Data privacy policy
• Data retention policy
• Data use policy
• Email obfuscation
• Employee time tracking
• Manual for the NDR
• OTR messaging
• Polygraph tests
• Sensitive data transmission
• Unsubscribe email
• Use of cookies
• Use of OpenAI as a subprocessor