Trust Centre

Can you trust this platform?

Here's exactly what happens to your code when you run a scan, in plain terms.

Your code is scanned in memory only

Uploaded archives are unpacked in server memory for the duration of the scan and are not written to disk or persisted after the response is returned.

Findings never leave your session

Your report is generated and returned directly to your browser. We don't store scan results in a database, and nothing is used for training.

Static analysis, not code execution

AIPentest reads your source as text and pattern-matches against known risk signatures. It never executes, imports, or runs any code you upload.

You control what you upload

Only include what you want scanned. Before zipping, remove non-code folders — node_modules, build artifacts, .git — and anything already covered by your .gitignore. The scanner only reads source, config, and env files.

Policies

Our policies

Privacy Policy

What we collect, why, and how long we keep it — in plain terms. Your source code is not permanently retained, and only limited audit metadata is kept. We use Meta Pixel with automatic advanced matching (hashed email only) for advertising attribution. Emails are hashed in your browser before transmission.

Data Handling

Uploaded archives are processed in memory for the duration of the scan and are not written to disk or used for training. Nothing is shared with third parties beyond what the scan itself requires.

Security Practices

Sessions are signed and HttpOnly, sensitive operations are gated behind server-side checks, and payment events are signature-verified before any credit is granted.

Credit Restoration

If AIPentest reserves a validation credit and the validation cannot be completed due to an AIPentest service failure, the reserved credit is restored. Failures caused by third-party services, connectivity, power outages, or other circumstances outside AIPentest's reasonable control are handled according to the applicable service and credit terms.

Refund Policy

Validation Credits are non-refundable and not redeemable for cash. AIPentest does not provide monetary refunds except where required by law. Where a validation fails due to an AIPentest-controlled platform failure, the remedy is restoration of the applicable validation credit.