This page is maintained by the AI App Ninja team to answer common security and privacy questions about our site. It's a plain-language overview, not an independent certification.
AI App Ninja just launched. We're a small team building in public. We are not SOC 2, ISO 27001, HIPAA, or PCI certified, and we don't claim to be. As we grow, we plan to formalize our security program and pursue independent audits — when that happens, we'll publish the report details here.
We build on managed cloud services for hosting, database, authentication, and email. Each provider has its own security and compliance posture. We'll publish a full subprocessor list when we have business customers who need one.
Security is a shared model. We secure the platform and our code; you protect your account by using a strong, unique password and keeping your devices secure.
If you believe you've found a security issue, please contact us privately before public disclosure. We appreciate responsible reports and will respond as quickly as we can.
We'll grow our security program in step with the product. When we add features for business customers (teams, SSO, audit logs), we'll evaluate formal frameworks like SOC 2. We won't claim certifications we haven't earned.