Security and trust center
Answers to the questions a security or vendor review usually asks, the public checks behind them, and where to find our policies. Last reviewed October 13, 2026.
Checks you can run yourself
These are independent public scanners. The results below are from our own run on October 13, 2026; follow the links to run them again.
| Mozilla HTTP Observatory | Grade A+ for azet.io, score 125, 12 of 12 tests passed. Run it |
|---|---|
| Qualys SSL Labs | Grade A+ on all four addresses azet.io answers on (two IPv4, two IPv6). Run it |
| security.txt | Published at /.well-known/security.txt in the RFC 9116 format, with our security contact and disclosure policy. |
Certifications
AZET is a young company. We don’t yet hold third-party security certifications or attestations such as SOC 2 or ISO/IEC 27001, and we won’t show their badges until we do. When we earn one, the certificate or attestation letter will be listed on this page.
Policies and documents
- Privacy policy: what each product collects, how long we keep it, and your rights, including California privacy rights.
- Safety and security: how we protect azet.io and how to report a vulnerability.
- Usage policy, Terms of service, Refund policy and Cookie policy.
- Open-source notices for the components our products use.
Frequently asked questions
Data security and privacy
What data does AZET collect?
Only what each product needs to work. Section 1 of our Privacy policy lists, product by product, what is collected and what is not. The azet waitlist asks only for an email address.
How is data protected in transit?
azet.io is served over HTTPS only, and browsers are told to use HTTPS for every visit (HSTS). A Content Security Policy limits which scripts can run, and other headers stop other sites from framing our pages.
Who handles card payments?
The payment provider or app store named at checkout. AZET doesn’t receive or store full card numbers.
Can I have my data deleted?
Yes. Write to hello@azet.io. Sections 7 and 9 of our Privacy policy explain your rights and how we delete information.
Access
Who can access personal information?
Only the few people who need it to run a product or answer a request, with managed permissions and access logs, as described in section 10 of our Privacy policy.
Compliance and certifications
Is AZET SOC 2 compliant?
Not yet. We haven’t completed a SOC 2 audit, so we don’t claim SOC 2 compliance.
Is AZET ISO/IEC 27001 certified?
Not yet. We don’t hold an ISO/IEC 27001 certificate.
AI
Will my company’s data be used to train models?
For azet Business, the team version of azet we plan to launch, our commitment is that your company’s conversations and files will never be used to train models. See AZET for business.
Reporting
How do I report a vulnerability?
Email hello@azet.io with the subject “Security report”, the steps to reproduce it and the impact you expect. We aim to reply within two business days. Details are on our Safety and security page.