How we handle your systems and data

Access and authorization

Every test starts with a signed authorization that names the system, the window and the limits, and our tools enforce it. We do not hold standing access to client systems. A key you give us for a test is kept only in an environment variable on the machine that runs the test, is never written into code or reports, and you revoke it when the engagement ends.

Data we keep

We keep only what a product needs. Raw test results are deleted 90 days after the report unless you ask us to keep them. Our own website has no analytics or cookies. Its request form is delivered to our email through Web3Forms, and the hosting provider keeps standard technical logs.

NEUSAI products do not collect data about children.

How our software is built

Each product has an automated test suite. Before publishing this website we ran all of them (376 tests, all passing). Keys for AI and other providers are never placed inside an app or a web page.

This website is static, with no database and no scripts at all. Its only form posts directly to Web3Forms, and the content security policy lets forms send data only to Web3Forms and to this website. It is served over HTTPS.

Reporting a weakness in our services

If you find a security weakness in this website or in a NEUSAI product, email info@neusai.com with the subject "Security report". Please give us a reasonable time to fix it before you publish anything, do not access data that is not yours, and do not run tests that could degrade a service.

We reply within three working days and we will not take legal action against good-faith research that follows these rules.

Payments

Payments go only to the bank account of NEUSAI Technologies LLC in the United Arab Emirates, by bank transfer to the account on our invoice. We never change bank details by email. If anyone asks you to pay NEUSAI to a different account, call us first.