Legal
Attestari Privacy Policy
Effective 2026-11-09
Attestari (attestari.ai, app.attestari.ai, the Attestari hook, the lookup API and the Attestari MCP server) is a service of The Elite360 Corporation ("we", "us"). This page explains what Attestari collects, why, who processes it, and how long it is kept. It supplements the Elite360 Privacy Policy, which covers your rights, cookies in general, international transfers and how to reach us. Where the two differ on Attestari, this page governs.
The short version
- Attestari examines public software packages. The grades we publish are about packages, not people.
- The hook sends, for each server an agent is set up to run, its name, source, package name and version. It never sends a command line, an argument, an environment variable, a file's contents or a folder's name, and never reads your API keys, tokens, environment secrets, prompts, chat history or file contents.
- We never sell personal information and never use it for advertising.
- Code you send us for a private examination is analysed by our AI provider, Anthropic, which does not train its models on it.
- Card details go to Stripe and never reach our servers.
What we collect, and why
| What | From where | Why |
|---|---|---|
| Account: name, email, company; sign-in by a code sent to your email | You, your identity provider | To create and secure your account |
| Sign-in history: the time of each sign-in, the IP address it came from, the approximate city of that address, and the browser | Our servers | To show you your sessions, and to tell you about a sign-in from a browser we have not seen before |
| Billing: plan, seats, billing address, tax ID if given, payment status, last four digits of the card | Stripe | To charge you and keep tax records. Stripe holds the full card details |
| Agents and their servers (computer name, system, agent, hook version, the version of Attestari's program installed there, each server's name, source, package and version) | The hook | To show your tools with their grades, to enforce your policy, and to email you when the grade of one of them changes (at most once a day; with Attestari Personal, a Monday summary you can turn off on your account screen) |
| Blocked calls: when, the rule, and the server's source, name and version | The hook | To enforce policy and keep the audit log your plan includes |
| Installs from the console's Find devices: who asked and who approved, which computers and agents, each one's state, and the signed instruction sent to each computer | Your admins, the hook | To put Attestari's hooks in place on the computers your organization chooses, keep them there, and show who did it |
| Policy and admin actions: rules, exceptions, who requested and granted them | You, your admins | To run the policy your organization sets |
| Monitoring: the GitHub account and repositories you connect, the paths of their lockfiles, and the packages and versions found in them (the lockfiles are read, not kept) | GitHub, through the Attestari GitHub App you install | To tell you when the grade of a package you depend on changes |
| Lookups: API key used, package and version asked about, time, response code | The lookup API and MCP server | Billing per lookup, rate limiting, abuse prevention |
| Private artifacts: packages or skill files you ask us to examine privately (private audits, pre-publish checks) | You | To examine them and produce your report |
| Package claims: the registry account you use to prove you publish a package | You, the registry | To verify ownership before showing a publisher their full report |
| Messages: emails and appeals you send us | You | To answer you and resolve disputes |
| Service logs: IP address, user agent, request times, errors, the hook's error lines (kept 30 days) | Our servers, the hook | Security, reliability and debugging |
The hook reads its own agent's configuration files and nothing else on your computer; what it reads, sends and keeps (under ~/.attestari) is listed in its documentation. Local files are never uploaded silently.
What is public
Result pages show a package's name, version, grade, date examined and a brief summary. The lookup counter on a result page shows a total count only; it never shows who looked. Nothing about your account, your devices or your lookups is ever published.
AI analysis
Attestari uses Anthropic's Claude models to examine packages. When you send a private artifact, its contents are sent to Anthropic for that analysis. Under Anthropic's commercial terms your content is not used to train its models, and Anthropic keeps API data only for a limited period for safety and abuse monitoring. Your device inventory, account and billing data are never sent to an AI provider.
Who processes data for us
We use a small set of providers, listed with their purpose and location at attestari.ai/subprocessors. We update that page at least 30 days before adding a provider that handles customer personal data.
How long we keep it
| Data | Kept for |
|---|---|
| Account data | While your account is open, then deleted within 30 days of closing it |
| Device inventory and protect records | As long as your plan's history allows (90 days on Small business, unlimited on Enterprise, current state plus 90 days on Personal), then deleted; all of it within 30 days of closing the account |
| The console's events and incidents | As long as your plan keeps its history |
| Installs from Find devices | As long as your plan keeps its history, once each install is finished; the signed instruction only until it is carried out, at most 24 hours; when a computer last asked for work, 30 days |
| Lookup records | 13 months, for billing and abuse prevention |
| Private artifacts | Deleted within 30 days after the report is delivered. The report is kept as long as your plan's history allows |
| Billing and tax records | 7 years, as tax law requires |
| Service logs and crash reports | 30 days |
| Messages and appeals | 24 months after the matter is closed |
Security
Traffic is encrypted in transit (TLS) and data is encrypted at rest. API keys are shown once and stored only as hashes. Secrets are held in a managed secret store, never in code. Access to customer data is limited to the Attestari engineers, through audited, access-controlled tools. The hook's releases are signed, with public provenance anyone can verify, and its dependencies are checked for known vulnerabilities on every build and every week.
Business accounts
When a company uses Attestari to manage its people's devices, the company controls that data and we process it on its behalf under the Data Processing Agreement, which forms part of the Attestari Terms for Small business and Enterprise accounts.
Your rights
You can see, export, correct or delete your data from the web app, or by emailing contact@elite360.ai. We answer within 30 days. If you are in the EU, UK or a US state with a privacy law, you also have the rights the Elite360 Privacy Policy describes, including the right to complain to your data protection authority. We do not sell personal information or share it for cross-context behavioural advertising.
Cookies
Attestari uses only the cookies needed to sign you in, keep your session secure and process payments (Stripe sets its own for fraud prevention at checkout). No advertising or cross-site tracking cookies.
Children
Attestari is a professional tool and is not directed at anyone under 16.
Changes
We post changes here with a new effective date. If a change materially affects how we use your data, we tell account holders by email at least 30 days before it takes effect.
Contact
The Elite360 Corporation, contact@elite360.ai.