Last updated: January 2026
This policy explains how FortifAI handles data across the website, dashboard, and CLI workflows.
We collect the minimum data required to operate FortifAI services securely and reliably.
Collected data may include account identity data, security telemetry, product usage, and support communications.
FortifAI is designed to execute security testing in your environment. By default, sensitive prompts, responses, and source data remain local.
Optional telemetry is anonymized and used for product reliability and security quality improvements.
Data is used to provide and secure the product, improve reliability, enforce abuse controls, and support customer operations.
FortifAI applies standard controls including encrypted transport, access controls, and monitoring to protect system data.
Because scan execution is primarily local-first, sensitive testing content typically remains within your own environment unless you explicitly transmit it.
The website may use cookies for authentication, analytics, and experience settings. You can manage cookie behavior in browser preferences.
For privacy questions or requests, contact our team at support@getfortifai.com.