Privacy

Last updated 2 October 2026. What changed: we no longer receive finished reports either. A second read is done on a call while you share your screen, and we keep no copy. Earlier, 30 September 2026: we no longer receive inventories at all, because the tool runs on your own machines; card payments and the plan-line check call were described.

This describes what we collect, what we do with it, and when we delete it. It is short because we collect very little.

The commitment that matters

We never receive your inventory. The tool runs on your own machines and sends nothing to us. The report is reproducible from its recorded snapshot version and assessment date, so we do not need your data to stand behind our findings.

What we collect

Whatever you put in an email to us. There is no form on this site. Contact is a plain email address, so nothing is collected before you choose to write.
On a second-read call about your finished report: only what you choose to show us on screen. We look, we do not record the call, and we keep no copy. We do not receive the report itself, and we do not want configuration files, keys, credentials, network addresses or personal data. If you send any of those by accident, tell us and we will delete them immediately.
When you pay by card: your name, email address, company and what you bought. Card payments are handled by our payment processor, and we never see your card number.
On a plan-line check call: only what you choose to show us on screen. We look, we do not record the call, and we keep no copy.

What we do not do

We do not scan your network. No agents, no credentials, no connections into your environment. Ever.
We do not sell, share or rent your data. There is no third party involved in producing your report.
We do not run advertising or analytics trackers on this site. No cookies are set, and there are no third-party scripts anywhere on it.
We do not use your data to train anything.

The contract check page

One page, /check, has a search box on it. It is the only page that sends anything anywhere, and its script is ours, not a third party’s.

What you type there is sent to USAspending.gov, the US government’s public award database, directly from your browser. It does not reach us. We do not receive it, log it, or store it, and we could not see it if we wanted to. We hold no list of companies and ship none to your browser. The answer comes from the public record, live, each time.

That request goes to a US government service and is subject to their handling, not ours. Nothing else on the page loads from anywhere else.

How the tool runs

The tool runs on your own machines, and we receive nothing at all, neither the inventory nor the finished report. It works that way precisely because many organizations cannot release an asset inventory: for a defense contractor it is often CUI, and DFARS 252.204-7012 requires CUI to remain in systems meeting NIST SP 800-171.

If you want a second read of the finished report, we do it on a call while you share your screen. The report stays on your machines.

How long we keep things

Inventories: we never receive them.
The report itself: we keep a copy only for as long as you want us available to discuss it, and we delete it on request.
Contact details: kept until you ask us to remove them.

What we may say publicly

Nothing, unless you tell us otherwise in writing. We do not name customers, quote them, or describe their estates. If we ever want to say that a finding was found (never who, never any detail), we will ask first, and refusing changes nothing about what you receive.

Mutual NDA

A mutual non-disclosure agreement is built into our terms and is in force from the moment you accept them: before anything is exchanged, with nothing to sign. This page describes our practice; that section is what binds us to it.

Your rights

Ask us what we hold about you, ask for it to be corrected, or ask for it to be deleted, by email, and we will act on it. We will not ask you why.

Security

We hold as little as possible for as short a time as possible, which is the only security control that never fails. Anything you send us is held encrypted and is not shared outside AGILICRYPT.

Contact

AGILICRYPT
502 W 7th St, Ste 100, Erie, PA 16502, USA (registered office) · mail: 620 Allendale Rd, Ste 60522, King of Prussia, PA 19406
support@agilicrypt.com

Our full mailing address is on every invoice, and in the footer of anything we send you. Ask and we will give it to you.