AI Use Policy

Nubesti uses automation and artificial intelligence to find weaknesses and draft reports. This policy explains how that works. It supplements the Terms of Service and Privacy Policy.

1. What the AI does

AI and automated engines may:

• Map and probe in-scope assets you designate
• Classify and prioritize findings
• Draft report language, remediation hints, and pull-request suggestions
• Reduce obvious false positives

Humans may review enterprise or professional-services work. Self-serve scans can be fully automated.

2. Customer data and training

We process customer targets, evidence, and findings to deliver the service you bought.

We do not use your customer findings, evidence, or target lists to train public foundation models. We may use de-identified, aggregated product telemetry (for example, feature reliability) to operate and improve the platform.

If a future feature would use customer content to improve models in a way that could identify you, we will say so in-product and update this page before enabling it.

3. Your responsibilities

You remain responsible for:

• Completing KYC and holding a valid authorization
• Choosing safe scope (prefer staging)
• Reviewing AI output before you treat it as final
• Deciding which patches to apply

AI suggestions can be wrong, incomplete, or unsafe in your environment.

4. Limits

AI-assisted testing does not guarantee that every vulnerability will be found, that systems are breach-proof, or that you will pass a compliance audit. The disclaimers in the Terms apply.

5. Human review and support

Paid support and professional services may include human analysis. Unless an order form says a named analyst will review every finding, automation is the default.

6. Prohibited AI use by customers

You may not use Nubesti output to attack systems you are not authorized to test, to generate malware for harm, or to misrepresent findings as a formal certification.

7. Contact

[email protected] · [email protected]