Security

Security

Each fact below carries its status. Items in progress or planned are labelled and are not in place yet.

Cloud runs happen in the EU or US region chosen per project. Sent to the cloud: test specs, page snapshots and traces from runs, app URLs and test credentials stored encrypted. Without --cloud, the CLI runs tests on your own machine or CI runner.

In place

Cloud runs in EU or US region chosen per projectVerified
Traces and snapshots encrypted at rest and in transitVerified
Test credentials stored encrypted, never shown in reportsVerified
Retention window per plan, deletion on requestVerified

In progress and planned

SSO (SAML) on Scale and EnterpriseIn progress
SOC 2 Type IIPlanned
Self-hosted runnersPlanned

No certification is claimed until it is verified and a report reference exists.

Questions

Where do cloud test runs happen?

In the EU or US region, chosen per project.

How are test credentials stored?

Encrypted. They are never shown in reports.

How long are traces kept?

For the retention window of the plan: 7 days on Free, 30 days on Team, 90 days on Scale, custom on Enterprise. Deletion on request.

Is AI Testing Platform SOC 2 certified?

No. SOC 2 Type II is planned.

Is a DPA available?

A DPA is included in the Enterprise plan.

PrivacyDPARoadmap

Request early access

Early access: prices are the planned list prices. Billing starts when the platform enters beta; early-access use is not charged. We reply within 24 hours on business days.