Security & Compliance
Last updated: February 2026.
Overview
Asva AI is built to be a trusted resource for agentic commerce. This page summarizes how we approach security and compliance. We do not process payments or store payment card data on this site.
Data handling
- Lead data: Form submissions and contact details are sent to Brevo and optionally stored in our systems. Access is limited and data is used only for the purposes described in our Privacy Policy.
- Tool inputs: When you run our tools (e.g. entering a domain for the Readiness Score), we process that input to generate results. We do not retain sensitive credentials; scans are read-only where possible.
- No selling of data: We do not sell your personal information to third parties.
Infrastructure and practices
- We use HTTPS and secure connections for all pages and API calls.
- Form submissions are rate-limited and protected with honeypot and consent checks to reduce spam and abuse.
- We rely on established providers (e.g. Brevo, Calendly) that maintain their own security and compliance programs.
Compliance
We aim to align with common privacy and data-protection expectations. If you have specific compliance questions (e.g. GDPR, CCPA), contact us via Get Help. Our Privacy Policy describes your rights and how to exercise them.
Reporting issues
If you believe you have found a security vulnerability, please contact us through the site rather than disclosing it publicly. We will respond as quickly as we can.