Data handling

Do not send credentials through the public form. Source access should be read-only and is arranged after scope confirmation. Access should be revoked at delivery.

Working data

ByteAssure minimises collected data, redacts evidence where possible and does not use customer source code for marketing or model training. Unless a contract says otherwise, temporary source working copies are deleted within 30 days after final delivery. Reports and engagement records may be retained for 12 months; billing records follow legal retention requirements.

Engagement-specific contractual terms take precedence. Final infrastructure and processor details must be documented before live service.