Information we process
AgentProof processes the name and email supplied through Cognito, agent configuration, bounded verification evidence, plan entitlements, and payment-provider identifiers needed to operate the service.
Service providers
Amazon Web Services hosts application infrastructure, Amazon Cognito manages authentication, Dodo Payments processes purchases, and PostHog may receive privacy-minimal product events when analytics is enabled. AgentProof does not send passwords, endpoint credentials, prompts, raw evidence, names, or email addresses to PostHog.
Verification data
Endpoint credentials are stored separately in AWS Secrets Manager. Private reports remain owner-protected. Public reports intentionally exclude credentials, account data, and full raw evidence.
Retention and requests
Report artifacts are retained for up to 365 days unless a shorter lifecycle applies. Contact support for data-access, correction, or deletion requests. We may retain limited records where required for security, fraud prevention, tax, or legal obligations.
Contact
For privacy requests, contact support@agent-proof.dev.