Privacy notice

Who operates the service

AgentRiskLayer is currently operated by Guillaume Strohecker in London, United Kingdom. Privacy contact: support@agentrisklayer.com.

What the public request form does

The assessment request form prepares an email in your own email client. The public website does not submit or store that form in a separate lead database. Do not include passwords, API keys, access tokens, private keys or customer data in the request.

Information we may process

• Contact and business information you send when asking about an assessment.
• System descriptions, architecture context and authorised scope information needed to plan the work.
• Assessment evidence, findings, remediation information and retest records created during an agreed engagement.
• Communications, proposals, invoices and records needed to administer the service.
• Limited security and operational logs needed to protect and operate AgentRiskLayer systems.

Why we process it

We process information to answer enquiries, agree scope, provide the requested assessment, maintain evidence and service records, protect the service and meet applicable legal obligations.

Payment information

The current website does not provide card checkout or recurring online subscriptions, and AgentRiskLayer does not collect card details through the website. Payment arrangements for an engagement are agreed separately as part of the commercial scope.

Service providers

Hosting, database and email providers may process the limited information required to operate the service and deliver communications. They process data under their own contractual and security terms.

Assessment data boundaries

Customer-authorised testing is bounded to the agreed target and scope. ARL is designed to distinguish observed or reproduced evidence from customer declarations and unknown information. Credentials and matched secret values should not be included in public requests or reports.

Retention and security

Information is retained only for as long as needed for the assessment, operational security, contractual records or legal obligations. We use access controls, encrypted HTTPS transport and other security measures appropriate to the service.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection. Contact support@agentrisklayer.com. You may also complain to the relevant supervisory authority.

Changes

Material changes to this notice will be published with a revised effective date.