[{"data":1,"prerenderedAt":270},["ShallowReactive",2],{"legal-privacy-policy":3},{"id":4,"title":5,"body":6,"date":261,"description":262,"extension":263,"meta":264,"navigation":265,"path":266,"seo":267,"stem":268,"__hash__":269},"legal\u002Flegal\u002Fprivacy-policy.md","Privacy Policy",{"type":7,"value":8,"toc":240},"minimark",[9,21,26,29,34,37,41,50,54,57,60,64,72,76,79,82,86,89,117,121,124,151,154,158,166,170,173,181,185,188,191,195,198,201,205,208,212,215,219,222],[10,11,12,13,20],"p",{},"At Pensure, we value your privacy and are committed to handling personal information responsibly. This Privacy Policy explains how Pensure Pty Ltd (ABN 87 688 512 334) collects, uses and shares information when you visit ",[14,15,19],"a",{"href":16,"rel":17},"https:\u002F\u002Fpensure.ai",[18],"nofollow","pensure.ai",", contact us, use the Pensure platform or engage us for penetration-testing services (together, the “Platform”).",[22,23,25],"h2",{"id":24},"_1-information-we-collect","1. Information we collect",[10,27,28],{},"The information we collect depends on how you interact with Pensure.",[30,31,33],"h3",{"id":32},"website-and-enquiries","Website and enquiries",[10,35,36],{},"When you contact us by email, book a scoping call or submit an enquiry, we may collect your name, work email address, organisation, contact details, the contents of your enquiry and information needed to respond or scope a potential engagement. The marketing site does not contain a form-processing backend; contact links open email or an external Google Calendar booking flow.",[30,38,40],{"id":39},"account-and-product-information","Account and product information",[10,42,43,44,49],{},"When you use the Pensure product, Pensure may process account, organisation, billing, authentication, usage and support information needed to provide and secure the service. Product sign-in is handled through the external Pensure application at ",[14,45,48],{"href":46,"rel":47},"https:\u002F\u002Fapp.pensure.ai",[18],"app.pensure.ai","; the marketing-site repository does not contain that application's authentication or storage implementation.",[30,51,53],{"id":52},"penetration-testing-engagement-information","Penetration-testing engagement information",[10,55,56],{},"An engagement may involve targets, application or API information, test accounts, authentication material where required, vulnerability evidence, screenshots, request-response evidence, reports and remediation information. Pensure uses this information to scope and perform authorised testing, validate findings, prepare reports, communicate with the customer and support retesting.",[10,58,59],{},"Please do not send passwords, API keys, tokens or other secrets through marketing forms, ordinary email or booking notes. Where access is required, Pensure arranges an appropriate secure handoff after scope and authorisation are confirmed.",[30,61,63],{"id":62},"analytics-and-similar-technologies","Analytics and similar technologies",[10,65,66,67,71],{},"The marketing site uses Google Analytics and PostHog to understand website and platform usage, measure performance, monitor relevant events and improve our services. These services may receive technical information such as IP address, browser and device information, pages viewed, approximate location, referral information and interaction events. See our ",[14,68,70],{"href":69},"\u002Fcookie-policy","Cookie Policy"," for more detail.",[22,73,75],{"id":74},"_2-ai-assisted-testing-and-data-processing","2. AI-assisted testing and data processing",[10,77,78],{},"Pensure uses AI-enabled testing workflows during penetration testing, with human validation and review before final delivery. The platform is documented as using managed Google Cloud services including Vertex AI. Relevant engagement information may therefore be processed by Pensure's AI-enabled testing workflows when needed to perform the authorised service.",[10,80,81],{},"The repository does not establish the exact categories of engagement information sent to Vertex AI, provider retention settings, whether provider personnel can access prompts or outputs, or whether those inputs and outputs are excluded from general model training under Pensure's current provider arrangements. Those details require confirmation before Pensure makes a stronger public commitment. Pensure does not use this uncertainty to change the approved human-validation model: every reported finding is human validated and reviewed before final delivery.",[22,83,85],{"id":84},"_3-how-we-use-information","3. How we use information",[10,87,88],{},"We use information to:",[90,91,92,96,99,102,105,108,111,114],"ul",{},[93,94,95],"li",{},"respond to enquiries and arrange or scope engagements;",[93,97,98],{},"provide, secure, support and improve the Platform;",[93,100,101],{},"perform authorised penetration testing and generate reports;",[93,103,104],{},"validate findings, review evidence and support retesting;",[93,106,107],{},"measure website and product usage through Google Analytics and PostHog;",[93,109,110],{},"communicate about services, reports, support and material updates;",[93,112,113],{},"prevent misuse, investigate security events and enforce our agreements; and",[93,115,116],{},"meet legal, accounting and operational requirements.",[22,118,120],{"id":119},"_4-sharing-and-disclosure","4. Sharing and disclosure",[10,122,123],{},"We may share information with:",[90,125,126,133,139,145],{},[93,127,128,132],{},[129,130,131],"strong",{},"Service providers and subprocessors"," that support the Platform or our business, including Google Cloud for platform infrastructure, Google Analytics and PostHog for analytics, Cloudflare for marketing-site delivery and security, and Google Calendar for appointment scheduling;",[93,134,135,138],{},[129,136,137],{},"Pensure personnel and qualified reviewers"," where access is required to deliver, validate, report or retest an engagement;",[93,140,141,144],{},[129,142,143],{},"Your authorised personnel"," or other parties you direct us to involve; and",[93,146,147,150],{},[129,148,149],{},"Legal or regulatory authorities"," where required by law or reasonably necessary to protect rights, safety or the integrity of the Platform.",[10,152,153],{},"We do not sell your personal information to third parties.",[22,155,157],{"id":156},"_5-overseas-processing","5. Overseas processing",[10,159,160,161,165],{},"Pensure's platform runs on Google Cloud Platform, using managed services including Cloud Run, Secret Manager and Vertex AI. The marketing site also uses Google Analytics and PostHog; PostHog is configured in this repository to use the US endpoint ",[162,163,164],"code",{},"us.i.posthog.com",". These services may process information outside Australia. The exact Google Cloud hosting region and complete provider data-location configuration are not established in this repository.",[22,167,169],{"id":168},"_6-security-and-human-access","6. Security and human access",[10,171,172],{},"Pensure combines Pensure-operated application and engagement controls with the independently assessed controls of Google Cloud infrastructure. Connections use TLS\u002FHTTPS, and Google Cloud encrypts customer content at rest and in transit by default. Qualified humans may access relevant engagement information where required to validate findings, assess exploitability, remove false positives, review evidence, finalise reporting and support retesting.",[10,174,175,176,180],{},"For more detail about the infrastructure and engagement safeguards, see ",[14,177,179],{"href":178},"\u002Fdata-security","Security and data handling",".",[22,182,184],{"id":183},"_7-retention","7. Retention",[10,186,187],{},"We retain information for as long as reasonably necessary for the purpose for which it was collected, to provide and secure the Platform, to complete an engagement, to meet accounting or legal requirements, or to resolve disputes. Retention depends on the type of information and the applicable customer agreement or statement of work. Analytics retention is also affected by the configuration of the relevant provider.",[10,189,190],{},"Pensure's exact retention and deletion schedules for account data, engagement data, analytics and backups are not published here because they require confirmation.",[22,192,194],{"id":193},"_8-access-correction-and-complaints","8. Access, correction and complaints",[10,196,197],{},"You may ask us to provide access to, or correct, personal information we hold about you. You may also contact us with a privacy concern or complaint. We will review the request or complaint and respond through the contact details below.",[10,199,200],{},"You can manage analytics and other non-essential storage through your browser settings. Blocking necessary storage may affect some Platform functionality.",[22,202,204],{"id":203},"_9-children","9. Children",[10,206,207],{},"The Platform is intended for business users and is not directed to children. We do not knowingly collect personal information from children through the marketing site.",[22,209,211],{"id":210},"_10-changes-to-this-policy","10. Changes to this policy",[10,213,214],{},"We may update this Privacy Policy periodically. We will publish the revised version on this page with an updated effective date and provide additional notice where appropriate.",[22,216,218],{"id":217},"_11-contact","11. Contact",[10,220,221],{},"For privacy questions, access or correction requests, or complaints:",[90,223,224,234],{},[93,225,226,229,230],{},[129,227,228],{},"Email:"," ",[14,231,233],{"href":232},"mailto:josh@pensure.ai","josh@pensure.ai",[93,235,236,239],{},[129,237,238],{},"Address:"," 30-03, 201 Elizabeth Street, Sydney NSW 2000, Australia",{"title":241,"searchDepth":242,"depth":242,"links":243},"",2,[244,251,252,253,254,255,256,257,258,259,260],{"id":24,"depth":242,"text":25,"children":245},[246,248,249,250],{"id":32,"depth":247,"text":33},3,{"id":39,"depth":247,"text":40},{"id":52,"depth":247,"text":53},{"id":62,"depth":247,"text":63},{"id":74,"depth":242,"text":75},{"id":84,"depth":242,"text":85},{"id":119,"depth":242,"text":120},{"id":156,"depth":242,"text":157},{"id":168,"depth":242,"text":169},{"id":183,"depth":242,"text":184},{"id":193,"depth":242,"text":194},{"id":203,"depth":242,"text":204},{"id":210,"depth":242,"text":211},{"id":217,"depth":242,"text":218},"8 October 2025","How Pensure collects, uses and protects personal information across its website, product and penetration-testing services.","md",{},true,"\u002Flegal\u002Fprivacy-policy",{"title":5,"description":262},"legal\u002Fprivacy-policy","eiqkREPpCWBQ3mv7cIUNJJdsHUB5A-lSiA6dK8m02Sk",1788789307102]