We are a security company — the platform runs the same controls we ask you to put around your browser fleet. This page is the honest state of our posture: what is in place today, and what is on the roadmap.
Tenant data is scoped to your account at the database and application layer.
Login security is not an upsell — every plan, including Free, gets the same authentication controls.
Customer traffic over the public internet is encrypted in transit and filtered at the edge.
Security review is part of every change, not a phase.
Errors are tracked centrally and incidents follow a written runbook.
Extension analysis runs on public data — personal data collection stays minimal.
The EU General Data Protection Regulation governs how personal data of EU residents is handled. We maintain an Article 30 record of processing activities, document a lawful basis for every processing purpose, keep a register of subprocessors, and honor data subject rights. Our Data Protection Officer is reachable at dpo@extensionauditor.com, and a data processing agreement is available to customers on request.
Read the privacy policyExtension Auditor is built by Alpha CISO Pte. Ltd., a company registered in the Republic of Singapore. Our processing register and privacy program are maintained under the Personal Data Protection Act alongside GDPR, with a single register covering both.
Businesses that handle cardholder data must comply with the Payment Card Industry Data Security Standard. Payments for Extension Auditor are processed by Stripe, a certified PCI Level 1 service provider — card numbers never touch our servers, and we store no cardholder data.
Extension governance is a control your reviewers ask about. Extension Auditor maps fleet policy and monitoring evidence to common enterprise control frameworks, so browser-extension risk shows up in your audit file as evidence rather than a gap. Security questionnaire support (SIG/CAIQ-style) is available on Business and Enterprise plans.
Enterprise procurement needs answers, not a runaround. We complete vendor security assessments on request:
Cloud Security Alliance Consensus Assessments Initiative Questionnaire
Standardized Information Gathering questionnaire
Vendor Security Alliance questionnaire
Your organization’s own security questionnaire
We complete vendor security questionnaires, share current documentation, and schedule security review calls with prospective customers. A data processing agreement is available on request via dpo@extensionauditor.com.
Next step
Start a free trial or book a demo — no fleet required to evaluate risk data first.
