Effective: April 6, 2026 · Last updated: June 30, 2026
1. Overview
Wakefield processes customer data to provide security testing services. We only collect and use data necessary to operate, improve, and secure our services. Wakefield is a business-to-business security testing platform and is not designed to collect or process the personal data of our customers' end users. Customers are responsible for ensuring that the test credentials and environments they provide do not expose production personal data.
2. Data We Collect
We may collect:
- Account information (e.g., email, name)
- Application data submitted for testing
- Logs and metadata generated during scans
We do not seek production end-user personal data. Customers should provision dedicated test accounts and environments that do not contain personal data; any incidental personal data is processed only to provide the Service and in accordance with the agreement between us.
3. Use of Data
We use data to:
- Provide and operate our services
- Identify and report vulnerabilities
- Maintain system security and reliability
4. Service Providers and Subprocessors
We rely on a limited set of third-party service providers ("subprocessors") to operate the Service. Subprocessors are bound by contractual obligations to protect data and may process it only to provide services to Wakefield. Current categories include:
- Cloud infrastructure and hosting (e.g., Amazon Web Services, Microsoft Azure)
- AI model and inference providers used to analyze findings (e.g., Anthropic, Fireworks AI)
- Payment processing (Stripe)
- Authentication and identity (Clerk)
A current list of subprocessors is available on request at privacy@alkonos.ai.
5. International Data Transfers
Wakefield is based in the United States and processes data there. If you access the Service from outside the United States, your data may be transferred to, stored, and processed in the United States and other countries where our subprocessors operate. Where required, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, for cross-border transfers.
6. Data Retention
We retain data only as long as necessary to provide the service and meet legal or contractual obligations.
7. Data Deletion Requests
Users may request deletion of their data at any time by contacting privacy@alkonos.ai
Upon receiving a verified request, we will:
- Confirm the requester's identity
- Delete or anonymize personal data from production systems
- Schedule deletion from backups in accordance with our retention policy
We fulfill deletion requests within 30 days.
8. Your Privacy Rights
Depending on your location, you may have rights over your personal data, including the rights to access, correct, delete, or port it, and to object to or restrict certain processing. Residents of the European Economic Area and the United Kingdom have these rights under the GDPR and UK GDPR; California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. We do not sell personal data.
To exercise any of these rights, contact privacy@alkonos.ai. Where Wakefield processes personal data on a customer's behalf as a processor, we will refer such requests to the relevant customer (the controller).
9. Cookies
Our website and application use cookies and similar technologies that are strictly necessary to operate the Service, maintain sessions, and understand usage. We do not use cookies to sell personal data. You can control cookies through your browser settings, though disabling some may affect functionality.
10. Security
We implement administrative, technical, and organizational safeguards to protect data.
11. Data Processing Addendum
For customers that require it, Wakefield offers a Data Processing Addendum (DPA) that governs the processing of personal data on the customer's behalf and incorporates applicable data-protection terms, including Standard Contractual Clauses where relevant. To request a DPA, contact privacy@alkonos.ai.
12. Contact
For privacy-related requests: privacy@alkonos.ai