How WASViking handles your data, and the terms that govern the service.
Everything a security review or a procurement team needs before signing: the agreements you accept, how personal and security data is processed, who our subprocessors are, and how the platform is protected. Every document here is the current version. When a document changes, its Effective Date changes with it.
WASViking LLC, Florida, United States. Contracts, privacy notices and the Partner Agreement are all entered into with this entity.
Source: Terms of ServiceHosted on Amazon Web Services in the United States, behind Cloudflare (WAF, TLS, DNS), with network segmentation and least-privilege access.
Source: Security Practices, SubprocessorsData in transit is protected using TLS 1.2 or higher. Customer data stored in Amazon RDS and MongoDB Atlas is encrypted at rest.
Source: Security PracticesSign-in verification steps may include an email security code, authenticator-based two-factor authentication, or an approved identity provider.
Source: Security PracticesProduct supports compliance with GDPR · LGPD · PCI DSS v4.0 · ISO 27001 · BACEN 4893 & 4658. WASViking LLC is working toward SOC 2 Type I · ISO 27001 Certification. See the compliance mapping
Legal Agreements
The agreements that govern use of the platform, purchases through partners, the partner program, and the processing of personal data on your behalf.
Terms of Service
Rules and obligations for using the WASViking platform.
Acceptable Use Policy (AUP)
Guidelines on acceptable behavior when using our services.
Data Processing Agreement (DPA)
Contractual terms for clients regarding data processing and compliance.
Partner Agreement
Commercial terms for authorized partners, resellers, MSSPs, and integrators in the WASViking partner program.
Privacy
How WASViking collects, uses and protects personal data and security data across the platform, the public website and the AI Guardian browser extension.
Privacy Policy
How we handle your personal data with transparency and security.
Cookies Policy
Explanation of cookies used by the platform.
AI Guardian Browser Extension Privacy Policy
Privacy policy for the AI Guardian browser extension distributed through the Chrome Web Store and Microsoft Edge Add-ons.
Security Data Handling
How WASViking handles exposure intelligence, monitored domains, masked sensitive data, and audit-controlled access.
Security
The controls behind the platform and the third parties that process data on our behalf.
Technical detail for security reviews.
The customer documentation covers the platform in more depth than a policy can. These pages are the ones security teams ask for most.
Platform architecture
How WASViking is built and operated. The security posture, the isolation model, and the engineering practices behind the platform.
Read on docs.wasviking.comTenant isolation and data handling
How WASViking keeps organizations apart, what we encrypt, what we keep, and what never leaves your environment.
Read on docs.wasviking.comReporting vulnerabilities
How to report a security issue to WASViking. Coordinated disclosure, safe harbor, response timelines.
Read on docs.wasviking.comAccount closure and data erasure
How an organization administrator closes an account, what happens during the 60-day reversible window, what is erased, what is kept and why.
Read on docs.wasviking.comProduct capability is not company certification.
We keep the two apart. What the product helps your team demonstrate is one thing; what WASViking LLC itself is certified for, or working toward, is another.
Findings map to specific controls, and the evidence is generated from real scan results. See the framework mapping
Company-level postures, separate from what the product supports for you. The Data Processing Agreement is published above and can be executed on request.
Questions about security or privacy?
Write to the team that owns the answer. Security reviews, data subject requests and contract questions each have a direct address.
Evaluating WASViking? Talk to our team and we will bring the right people to the call.
- Legal [email protected] Terms, DPA, Partner Agreement and other contract questions.
- Privacy [email protected] Data subject requests, deletion and the Data Protection Officer.
- Security [email protected] Security questions and vulnerability reports.