Security at SavvyShield

SavvyShield sits in the browser, where people make their most important security decisions, so we hold ourselves to a high standard. This page summarizes how we build and run the service. Our Privacy Policy and subprocessor list have the full details on data.

Data minimization by design

• The browser extension sends only what it needs to check a link: the link, the address of the page, and the link text. It never sends what people type into forms, their passwords, or their cookies.
• Page checks for scams such as fake “verify you are human” prompts run in the browser. Page text is sent only when a page matches, and then only the short passages that matched.
• Administrators can turn on stricter privacy modes that send only the link, mask link parameters, or mask page addresses.
• Scan content is redacted before it’s stored, and redacted records are deleted after 90 days.
• Anything typed into a simulation is never recorded or sent.
• Our AI providers are not allowed to train their models on customer data.

Infrastructure and encryption

• The service runs on Google Cloud. Customer data is stored in the United States.
• Real-time checks run on servers in the United States, Europe, and Asia, so protection stays fast for distributed teams.
• Data is encrypted in transit (TLS) and at rest.

Access and identity

• SAML single sign-on with identity providers such as Okta and Microsoft Entra ID, and SCIM provisioning, so access follows your directory. When someone leaves, removing them from your directory removes their access.
• Multi-factor authentication is available for every user.
• Access is limited by role, for customers and for our staff.
• Administrative actions are recorded in an audit log.

Controls for administrators

• Choose whether people can proceed past a warning or are fully blocked.
• Exclude sites from checks, and allow blocked sites by domain after review.
• Turn automatic checks off for the organization.
• Turn on extra protection for browsers that AI agents use. It’s off by default.
• Deploy and lock the extension through Google Admin Console, Microsoft Intune, or Firefox enterprise policies.

Data retention and deletion

• Redacted scan records: deleted after 90 days.
• Removed users: personal information deleted within 30 days.
• Closed accounts: data deleted within 90 days after the subscription ends.

The Privacy Policy lists every retention period.

Testing and secure development

• SavvyShield has been through independent, third-party penetration testing, and we retest after fixes.
• Every change to our backend passes automated checks and tests before it can deploy.
• Extension updates go through Chrome Web Store and Firefox Add-ons review before they reach users.

Compliance

• SOC 2 readiness is in progress.
• We act as a processor for business customers’ data, under privacy laws such as the GDPR, as described in the Privacy Policy.
• We can complete your security questionnaire. Contact our team to start a security review.

Reporting a vulnerability

If you believe you’ve found a security issue in SavvyShield, email contact@savvyshield.com with “Security” in the subject line and enough detail for us to reproduce it. Please give us a reasonable chance to fix the issue before sharing it, and don’t access or change other people’s data while testing. We’ll acknowledge your report and keep you updated.