What happens to your data.
The full path of an uploaded scan, from TLS handshake to encrypted storage to deletion. Every step documented. No black boxes.
From upload to storage, in six steps
Step 01
File received over TLS
Your file is transmitted over HTTPS (TLS 1.3 with modern browsers). HSTS keeps browsers off plain HTTP, and same-origin enforcement blocks cross-site forgery.
Step 02
Format validated — malicious content rejected
File size, extension, and content type are checked before any parsing begins. Files over 100 MB or with unsupported formats are rejected immediately with no storage.
Step 03
Content parsed in-process — not forwarded to AI
Parsers extract vulnerability records (CVE IDs, CVSS scores, package names) using our own parser chain. Your raw file content is not sent to any AI model or third-party service.
Step 04
Normalized findings stored org-scoped
Extracted findings are written to a shared PostgreSQL database with every row tagged to your organization, and every query is scoped to it. No other tenant can read, query, or enumerate your findings.
Step 05
Raw artifact stored encrypted
The original file is stored in Google Cloud Storage, encrypted at rest by Google Cloud. Default retention is 180 days. Configurable per organization.
Step 06
Deleted at your retention cutoff
Your retention policy runs automatically and purges raw scan files at the configured cutoff (180 days by default). Deleting an individual upload from the app is not available yet.
What we promise
Uploaded scan files are not model training data
Scan files you upload are parsed to extract vulnerability records. They are not silently repurposed as cross-tenant model training data.
Strict tenant isolation
Every database query, API response, and file operation is scoped to your organization ID — derived from your authenticated server session, never from client-supplied input.
Configurable retention, not indefinite
Default raw artifact retention is 180 days. Findings are kept 1 year by default. Audit logs are kept 7 years. All windows are configurable by org admins.
Deletion on request
To have your account and its data deleted, email support@cveriskpilot.com; deleting uploads or your account from within the app is not available yet. Deletion requests processed within 30 days.
Your data is exportable
Workspace owners can download core organization records (members, assets, findings, cases, exceptions, evidence and the audit log) as JSON and CSV, with secrets redacted; a manifest lists what is not yet included.
Operator access is restricted and audited
Sensitive operator access to customer data is restricted to platform-owner admins. Sensitive operator reads and writes are logged to the tamper-evident, hash-chained audit trail; signed export is in progress.
Technical safeguards
Program memberships
© 2025 NVIDIA. The NVIDIA logo is a trademark of NVIDIA Corporation.
Questions about our security practices?
Contact our security team directly, or review our security and privacy policies for full details.