Legal
The paperwork.
Written to be read, not to be survived. Each of these describes what we actually do rather than the widest position a template would let us take.
All last updated 17 August 2026
Privacy policy
What we collect, where it is stored, how long we keep it, and your rights under the DPDP Act and the GDPR.
Terms of service
The terms for using this website, and the framework an engagement runs under.
Cookie policy
Every cookie and storage mechanism in play, and how to refuse each one. The public site sets none of its own.
Acceptable use policy
The work we will and will not take, the authorisation we require, and what happens to findings.
Security
Our position on vulnerability reports about our own systems. We do not run a disclosure programme.