CYBERPROTECT LEGAL
Privacy Policy
We keep the policy plain: we collect what we need to provide CyberProtect, protect it carefully, and do not sell your personal information.
Effective 5 July 2026
Effective 5 July 2026
CYBERPROTECT LEGAL
Privacy Policy
We keep the policy plain: we collect what we need to provide CyberProtect, protect it carefully, and do not sell your personal information.
Effective 5 July 2026
This Privacy Policy explains how CyberSentry Ltd, trading as CyberProtect, collects and uses information when you visit our website, request a report, book a demo, or use our services.
This Privacy Policy explains how CyberSentry Ltd, trading as CyberProtect, collects and uses information when you visit our website, request a report, book a demo, or use our services.
Information we collect
Information we collect
Information we collect
We collect information necessary to provide AI-driven External Attack Surface Management (EASM). This includes:
Platform Metadata: When you connect your identity plane (e.g., Microsoft Entra ID, Okta), we collect metadata regarding user accounts, active sessions, and risk levels. We never store clear-text passwords.
Attack Surface Telemetry: Publicly available technical data regarding your domains, IP addresses, and cloud configurations.
Professional Data: Contact details provided during account setup, demo requests, or report generation.
We collect information necessary to provide AI-driven External Attack Surface Management (EASM). This includes:
Platform Metadata: When you connect your identity plane (e.g., Microsoft Entra ID, Okta), we collect metadata regarding user accounts, active sessions, and risk levels. We never store clear-text passwords.
Attack Surface Telemetry: Publicly available technical data regarding your domains, IP addresses, and cloud configurations.
Professional Data: Contact details provided during account setup, demo requests, or report generation.
How we use information
How we use information
How we use information
Information is used strictly to secure your perimeter and automate threat response.
Remediation: To trigger safety-railed actions (like session revocation) based on your chosen policy.
Analysis: Our AI agents process telemetry to identify vulnerabilities before they are exploited.
Compliance: To maintain audit logs for your internal security requirements.
Information is used strictly to secure your perimeter and automate threat response.
Remediation: To trigger safety-railed actions (like session revocation) based on your chosen policy.
Analysis: Our AI agents process telemetry to identify vulnerabilities before they are exploited.
Compliance: To maintain audit logs for your internal security requirements.
Security & Data Residency
Security & Data Residency
Security & Data Residency
We treat your data with the highest level of security, aligned with SOC 2 Type II and ISO 27001 standards.
Encryption: All data is encrypted using AES-256 at rest and TLS 1.3 in transit.
Data Residency: By default, all data is hosted on secure AWS infrastructure within the United Kingdom (London Region). Customers may request hosting in the EU or US regions to meet specific regulatory needs.
Access Control: Access to customer data is strictly restricted to authorized engineers via Multi-Factor Authentication (MFA) and is logged for auditing.
We treat your data with the highest level of security, aligned with SOC 2 Type II and ISO 27001 standards.
Encryption: All data is encrypted using AES-256 at rest and TLS 1.3 in transit.
Data Residency: By default, all data is hosted on secure AWS infrastructure within the United Kingdom (London Region). Customers may request hosting in the EU or US regions to meet specific regulatory needs.
Access Control: Access to customer data is strictly restricted to authorized engineers via Multi-Factor Authentication (MFA) and is logged for auditing.
Sharing and processors
Sharing and processors
Sharing and processors
We do not sell your data. We only share information with sub-processors required to run our service:
Infrastructure: Amazon Web Services (AWS)
Alerting: Postmark (Email) and Slack (Integrations)
Analytics: PostHog (Anonymous usage data)
We do not sell your data. We only share information with sub-processors required to run our service:
Infrastructure: Amazon Web Services (AWS)
Alerting: Postmark (Email) and Slack (Integrations)
Analytics: PostHog (Anonymous usage data)
Your rights
Your rights
Your rights
Under GDPR and CCPA, you have the right to access, rectify, or erase your data at any time. Because we operate in the "Identity Plane," you can disconnect our access via your own identity provider (Entra ID/Okta) instantly, which triggers an automated purge of your platform metadata from our active systems.
Under GDPR and CCPA, you have the right to access, rectify, or erase your data at any time. Because we operate in the "Identity Plane," you can disconnect our access via your own identity provider (Entra ID/Okta) instantly, which triggers an automated purge of your platform metadata from our active systems.
Contact
Contact
Contact
For privacy inquiries or to request a Data Processing Agreement (DPA), contact our Data Protection Officer at: Support@cyberprotect.ai
For privacy inquiries or to request a Data Processing Agreement (DPA), contact our Data Protection Officer at: Support@cyberprotect.ai
External by design.
The UK’s first External Asset Surface Management platform. We monitor the dark web, impersonation risks, and exposed assets to protect your external surface automatically.
Company
CyberSentry Limited
External by design.
The UK’s first External Asset Surface Management platform. We monitor the dark web, impersonation risks, and exposed assets to protect your external surface automatically.
Company
CyberSentry Limited
External by design.
The UK’s first External Asset Surface Management platform. We monitor the dark web, impersonation risks, and exposed assets to protect your external surface automatically.
Company
CyberSentry Limited