Security
Security & trust
We hold OSINTA to a standard you can verify rather than take on faith. This page explains how we handle data, who we are, and how to report a security issue.
How we handle data
Self-only by design.
OSINTA helps you see and understand your own public digital footprint. We do not compile profiles of third parties.
Evidence-backed.
Every candidate trace comes with the reason it may be yours — you decide what belongs and what does not.
Cookieless analytics.
We measure usage without tracking cookies and without cross-site identifiers, so there is no consent banner to dismiss.
Data minimisation.
We keep what is needed to provide the service and nothing we cannot explain.
Where your data is hosted
OSINTA runs on Google Cloud, in the European Union (EU) region. Your data is encrypted at rest (Google Cloud infrastructure-level encryption) and in transit (TLS).
The sub-processors we use
We rely on a small set of vetted providers, each processing data only on our instructions: SendGrid (website email), Cloudflare Turnstile (bot protection), Twilio (sign-in one-time passcodes by SMS and email), Apple (Sign in with Apple and push notifications), Google (Sign in with Google), RevenueCat (in-app purchases, after launch), and Anthropic and OpenAI (the third-party AI services that generate OSINTA AI replies). To help you see your own digital footprint we also use open-web search providers (search terms drawn from your own details), data-breach check providers (a hashed email or, for some checks, your email address), and internet-infrastructure check providers (for domains or IP addresses associated with you). A full, named list of our sub-processors is available on request.
A verifiable identity
You do not have to trust our word. OSINTA LTD is a registered UK company, and its ICO registration is a public record you can check yourself.
- Registered company
- OSINTA LTD, England and Wales — Company No. 17263144
- ICO registration reference
- ZC174082
- Registered office
- 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
- DTI Data Trust Registry
- Trust Level 1 · #119
Responsible disclosure
Found a security issue? Email support@osinta.ai (our security & legal channel; info@osinta.ai is for general enquiries). Our machine-readable contact details are published at /.well-known/security.txt. Please give us a reasonable window to respond before any public disclosure.