Skip to main content
Vibgrate Graph: over 28% fewer tokens in our benchmark
Trust Center

Last reviewed 12 October 2026.

Security overview

The security program is how Vibgrate decides who can do what, how data is handled, and how a problem gets reported. This page is the short map. The detail sits on the pages linked below.

Aligned to ISO/IEC 27001 and SOC 2. Independent audit planned.

Top management approved the security policies on 7 October 2026. An independent audit has not been commissioned. This page is not a certificate and not an auditor's report.

Where to read the detail

  • Frameworks and status — the standards the policies are written against, and the scopes that are not selected.
  • Data handling — scans send metadata. Source stays on your machine, with one exception you choose.
  • Subprocessors — who processes data, what each company receives, and where.
  • Policies — what each approved policy covers. The full text is not posted.
  • Vulnerability disclosure — how to report a problem, and how fast we answer.
  • Contact — security and privacy mailboxes.

The longer account of what a normal scan sends is on Security. Signed releases and the commands to check a signature are on Signed releases.

Independent checks of this website

These reports describe vibgrate.com. They were scanned on 12 October 2026.