Data · Our commitment
Our commitment on de-identified data
LeakTrace builds de-identified data sets from what we read about firms' public security settings and how those settings change. We license some of them to organisations that build and test AI security systems. These are the promises we make, and the terms we require of anyone who receives the data.
No loginNo installNo mailbox accessOne dated record
01 · Eight promises
What we promise, and what we require.
- 01We never try to identify a firm or a person in de-identified data, and we forbid anyone who receives it from trying. Every licence we sign prohibits re-identification, linking the data with other data to identify anyone, and passing it on to anyone who has not agreed to the same terms.
- 02We remove what identifies. Names, email addresses, telephone numbers, street addresses, domain names and network addresses are removed or replaced before the data is saved for this purpose.
- 03We test every release. Before any release we check that no record can be traced back to a firm, including by comparing it with historical public DNS records. A record that fails is removed.
- 04We never reveal who our customers are. No data set says or implies whether a firm bought from us.
- 05We keep what you trust us with out of it. Supplier and client names, staff addresses, office network addresses, call-back numbers, your notes and your documents are never included.
- 06You can opt out. Customers can opt out from their dashboard. Any firm can ask us to exclude its domain at [email protected], and we apply it to every release after the request.
- 07Defensive use only. We license data for defending systems, not for attacking them, and we screen every recipient against sanctions lists.
- 08If something goes wrong, we say so. If we learn that anyone has tried to re-identify our data, we end their licence and tell affected firms where we can.
02 · Questions
Write to us.
Opt out or ask a question[email protected]. Customers can also opt out from their dashboard.
Where it is writtenThe Authorized Scan Agreement, section 5, and the Privacy Policy, section 6A.
Check my firm
See what your firm shows the internet, without handing over a key.
Your domain and a work email at it. No password, no login and no software. Read-only, and sent only to your work email.
Read next
Why LeakTraceWhy we exist, with every figure sourcedRead → Zero accessWhat we hold of your firm: nothingRead → What we coverWhat we see from outside, and what we never seeRead → What you getExactly what you receive, item by item, and who it is not forRead → Before money movesSupplier look-alikes and the numbers you already holdRead → Your firm changesEach change at your firm, and what we re-checkRead → Inside, confirmedWhat your own team checks, and how oftenRead → The recordOne dated record for clients and insurersRead →