Transparency and trust are core to how we operate. Find our policies, security practices, and compliance information below.
The short version of how we handle your data.
We are working towards SOC 2 with Oneleet. We will publish the report status here as it moves.
Your telemetry, findings and hunts are not used to train models shared with other customers.
Huntbase queries your lake and SIEM where they are, without a second copy. Data is stored by Huntbase only if you send it to the Huntbase Lake, and Scout sends only the rows it needs to analyse to our model provider.
Endpoint scripts are signed, need two-person approval, roll out in stages, and every step lands in the audit log.
How we collect, use, and protect your personal data. Our commitments under UK GDPR and applicable data protection law.
The terms governing your use of the Huntbase platform and services.
How we use cookies and similar technologies. Manage your preferences at any time.
Guidelines for responsible use of the Huntbase platform. Covers permitted activities, prohibited conduct, and enforcement.
Our standard DPA for customers who need a formal data processing addendum.
The third parties we use to process customer personal data, what they do and where.
Open-source licences and public-data attributions, including MITRE ATT&CK, CVE and NVD.
How to responsibly report security vulnerabilities. We welcome reports from the security community.
Real-time platform status and incident history. Check uptime and performance across Huntbase services.
Reach the right team for your enquiry.
Ask us anything about security, data handling or the DPA, or start on sample data and see for yourself.