Privacy

Information and purposes

We process workspace membership and account information for sign-in and access; billing information for subscriptions; and reports, researcher contact details and conversations for intake and replies.

Investigation records include narratives, assessments, evidence references, claims and unresolved questions. Human decisions, severity, remediation references and activity records support review and follow-up. Service diagnostics help operate and protect the application.

Third-party processing

Specialized service providers support sign-in, billing, report email, report screening, automated assessment and hosting. They process only the information needed for those functions.

The security page describes the services and data flows. Contact us for current provider terms and data locations.

Customer-controlled analysis

You host the Agent and authorize its repository access. The Agent sends report claims and source it reads to the model service you configure, subject to that service's policies.

Agent results sent to filtro.dev must exclude repository source. The Agent returns narratives and evidence references to filtro.dev. Its checks for source disclosures in model-written prose have limitations described on the security page.

Report text can contain a researcher's own proof of concept. That text is part of the submission and is not evidence of execution by filtro.dev.

Retention and requests

To request access, correction, deletion or retention information, email [email protected]. Individual reports cannot be deleted through the app.

Contact [email protected] for these requests. Audit-log integrity controls do not define retention periods or determine the outcome of a deletion request.

Report security issues to [email protected].