How we handle your systems and data
A security company should show its own practices. This page explains what we do with access, data and findings, and how to report a weakness in our own services.
Access and authorization
Every test starts with a signed authorization that names the system, the window and the limits, and our tools enforce it. We do not hold standing access to client systems, and credentials you give us for a test are kept in an encrypted store outside our code and deleted after the engagement.
Data we keep
We keep only what a product needs. Raw test results are deleted 90 days after the report unless you ask us to keep them. Our own website collects nothing and sets no cookies.
NEUSAI products do not collect data about children.
How our software is built
Each product is covered by automated tests that run before every release, and we check third-party dependencies for known vulnerabilities. Keys for AI and other providers live on our servers only, never inside an app or a web page.
This website is static: no database, no forms, no third-party scripts. It is served over HTTPS with a strict content security policy.
Reporting a weakness in our services
If you find a security weakness in this website or in a NEUSAI product, email info@neusai.com with the subject "Security report". Please give us a reasonable time to fix it before you publish anything, do not access data that is not yours, and do not run tests that could degrade a service.
We reply within three working days and we will not take legal action against good-faith research that follows these rules.
Payments
Payments go only to the bank account of NEUSAI Technologies LLC in the United Arab Emirates, through our payment provider or by bank transfer to the account on our invoice. We never change bank details by email. If anyone asks you to pay NEUSAI to a different account, call us first.