Trust, made visible.
DarkRisk measures cyber risk from the outside in, so transparency, security and privacy are foundational to how we work. This centre explains how we protect information and names the providers that help us deliver our services.
The foundations of trust.
Four commitments shape how DarkRisk is built and run, and each one links to where you can check it.
Working towards SOC 2 and ISO 27001.
We are building our security programme towards both frameworks. Neither is complete yet, so we do not claim certification or attestation. Ask us where we are and which controls are in place today.
SOC 2 In progress
SOC 2
An independent attestation of our security controls against the AICPA Trust Services Criteria.
27001 In progress
ISO/IEC 27001
The international standard for running an information security management system.
Services and subprocessors.
These providers support the DarkRisk platform, operations and customer services. A listing does not mean every provider receives Customer Data; access depends on the service and is limited to its purpose.
| Provider | Purpose | Website |
|---|---|---|
| 01Google Cloud | Cloud infrastructure | cloud.google.com (opens in a new tab) |
| 02AWS | Cloud infrastructure and AI services | aws.amazon.com (opens in a new tab) |
| 03Microsoft | Cloud and business services | microsoft.com (opens in a new tab) |
| 04Cloudflare | Network, DNS and web delivery | cloudflare.com (opens in a new tab) |
| 05Resend | Transactional email | resend.com (opens in a new tab) |
| 06GitHub | Source code and deployment | github.com (opens in a new tab) |
DarkRisk does not sell Customer Data or personal information.
Providers are used to operate and support the services described above. DarkRisk does not use customer inputs to train general-purpose AI models.
Read our AI declarationAI declaration
AI, with your organisation in control.
AI in DarkRisk is set per tenant. Your organisation’s configuration decides which models support your workflows, and our team manages preferences and opt-outs with you.
- No training of general-purpose models on your inputs
- Models chosen for each organisation
- Opt out of AI, a provider or a specific model
Policies and documents.
What a security or procurement review usually asks for, in one place.
- PolicyPrivacy policyHow DarkRisk handles personal information.
- TermsTerms of serviceThe agreement for using DarkRisk.
- TermsData processing termsOur commitments when processing data for customers.
- PolicyAcceptable useWhat the platform may and may not be used for.
- PolicyCookie policyWhat our websites store, and why.
- ManualPAIA manualRequesting access to records under PAIA.
- PracticeScanning practicesWhat DarkRisk scans, and how to reach us about it.
- DeclarationAI declarationProviders, safeguards and your opt-out choices.
- ProgrammeVulnerability disclosureHow to report a security issue to us.
- Filesecurity.txtOur machine-readable security contact.
- LiveSystem statusCurrent availability of DarkRisk services.