generated: '2026-09-14'
method: searched
source: https://aerviklabs.com/security/
note: >-
  Aervik Labs publishes a security page with a disclosure contact and a data-
  handling policy, but no security.txt (/.well-known/security.txt 404s), no bug
  bounty program, and no independent audit. Contact captured from the published
  page.
disclosure:
  present: true
  contact: aerviklabs@gmail.com
  channel: email
  policy_url: https://aerviklabs.com/security/
  statement: >-
    "If you find a real security issue or have a question about how your data is
    handled, email aerviklabs@gmail.com."
security_txt:
  present: false
  note: /.well-known/security.txt returned 404.
bug_bounty:
  present: false
certifications:
  present: false
  note: >-
    The page states plainly "We don't currently hold a SOC 2 report or similar
    independent audit." No ISO 27001, PCI, HIPAA or FedRAMP is claimed. No
    Compliance/TrustCenter pointer is emitted.
data_handling:
  request_retention: >-
    Request content is processed only as needed to generate a response; not
    stored in a database and not logged in identifiable form once returned.
  exception: A saved COI requirements profile is retained for reuse by id.
  subprocessor: >-
    Where an AI model reads the request, the model provider (Anthropic) sees it
    under its own data-retention policy.
  payments: Never collected or stored by Aervik Labs; handled by RapidAPI.