How we handle your data

• You are only charged on delivery. Your card is authorized when you check out, but we only charge you after your report is successfully generated. If anything goes wrong, the hold is released and you pay nothing.
• Your report is temporary. After your scan completes, the PDF is available for 10 minutes. Once it expires, the full report is gone — we do not store it.
• We don't keep your scan results. We store only that a scan happened (date, domain, and a severity summary). The detailed findings and the report itself are never saved to our servers.
• Your contact info is used to follow up. We may reach out to see how the scan went, answer questions, or offer a consultation. That's it — no spam, no selling your info.
• Scans use publicly available data only. We check DNS records, security headers, public code repos, and known breach databases. Nothing requires access to your internal systems.
• This system uses AI. We go to great lengths to be transparent about our use of AI services, threat modeling included. The system is set up based on years and thousands of hours of experience working with AI. Just like human generated reports, it is still fallible. If for any reason you believe the report to be erroneous, falsified, tampered with, or inaccurate, I want to hear from you. I review all support emails and will either fix the issues and re-run the report or issue a refund. See Issues below for info.
• Issues If you have any issues with your report, the findings in the report, or the report fails. Please contact support [at] scalingsuccess (.) io and we will re run the report or answer questions.

For a deeper analysis beyond what surface-level scanning can reveal, schedule a call or contact a trusted IT security partner for a full penetration test.