Security.

How we handle customer data

• Customer study data is encrypted in transit and at rest
• Each customer's data is kept separate and access is limited to the people who need it to provide the service
• We do not use customer study data to train models without written agreement
• We review our security practices as the company and the products grow

Customers with specific requirements, such as a security questionnaire or a data processing agreement, can write to contact@tremont.ai.

Reporting a vulnerability

If you believe you have found a security issue in our website or products, please tell us at security@tremont.ai. Include the affected system, the steps to reproduce the issue and any proof of concept. Please give us a reasonable time to fix it before you share it publicly.

What you can expect from us

• We will acknowledge your report within two business days
• We will keep you informed as we investigate and fix the issue
• We will not take legal action against researchers who follow this policy
• We will credit you for the finding if you wish

Ground rules

• Do not access, modify or delete data that is not yours
• Do not run denial of service, spam or social engineering attacks
• Do not test third-party services we rely on without their permission
• Stop and tell us as soon as you reach data you should not see

Safe harbor

Research carried out in good faith and in line with this policy is authorized. We consider it consistent with applicable anti-hacking laws and will not pursue claims against you for it. If a third party raises a legal claim about your research, we will make it known that you acted under this policy.