Secure Data Handling

Last updated: August 16, 2026

CyberAutophagy provides expert offensive security services for AI systems. Protecting client information is part of how we operate engagements, especially during red teaming and validation work.

General Principles

• Collect only the data necessary to perform the agreed scope
• Use client-approved secure channels for sharing artifacts and reports
• Limit access to named engagement personnel
• Avoid retaining sensitive data longer than required

During Engagements

For authorized testing and assessment work, data handling is defined in the statement of work and rules of engagement, including:

• What data types may be accessed or collected
• Where artifacts may be stored
• Retention and destruction timelines
• Stop conditions if sensitive data exposure exceeds approved bounds

What Not to Send Us Unprompted

Do not send production credentials, live secrets, customer datasets, or regulated data through the public website contact form. We will define secure transfer methods during scoping.

Website Inquiries

Information submitted through our public contact form is used only to respond to your request and scope a potential engagement. See our Privacy Policy for details.

Incident Response

If we discover active unrelated attacker activity or unintended exposure during an engagement, we follow the escalation and stop procedures defined in the engagement documents.

Questions

For secure data handling questions before or during an engagement, contact us through our Contact page.