Privacy Policy

1. Introduction

Verallax ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and disclose information in connection with the Verallax Cloud Security Posture Management (CSPM) platform and related services.

2. Information We Collect

We collect information to provide and improve our services, including:

• Account Credentials: Email address, authentication tokens, billing information.
• AWS Configurations: Role ARNs and organization settings for cross-account IAM role assumptions. We strictly run read-only scans and do not store customer credentials.
• Technical Diagnostics: IP addresses, browser info, Nginx connection logs.

3. How We Use Information

We process data strictly for:

• Identifying cloud account misconfigurations and mapping security vulnerabilities.
• Validating tenant boundaries to prevent cross-tenant data leaks.
• Authenticating users and processing subscription usage limits.

4. Data Isolation & Security

Tenant boundary enforcement is verified on every query. Customer information is isolated at the database schema level. We utilize TLS 1.3 in-transit encryption and AES-256 at-rest encryption to protect findings.

5. Contact Us

If you have any questions about this Privacy Policy, contact us at: [email protected].