See it on one of your own apps - live in 30 minutes
From discovery to a proven attack chain. A PoC in your own environment.
Last updated: 13 August 2026
apPosture is a self-hosted product. The most important privacy fact is structural: when you run apPosture, your source code, scan data and findings stay inside your own infrastructure. apPosture ("we") does not receive, store or process that data.
All scanning, AI analysis (via a local model) and reporting run on your hardware. We have no access to your code, repositories, scan results or the contents of your environment. Threat-intelligence updates use a local cache; any outbound connection is opt-in and configured by you.
When you submit a form or write in the website chat, we collect the details and message you choose to provide so we can respond. For chat, we also keep the page and topic where the conversation began and a best-effort company, country and city classification derived locally from the network connection; we do not store the raw IP address in the chat record. The browser session is held in a secure HttpOnly cookie. Our web servers keep standard request logs (IP address, user agent, timestamp) for security and reliability. We do not load third-party advertising or cross-site tracking on this site.
To answer questions, provide a demo or proof of concept you requested, understand which public material is useful, and protect the site against abuse. Chat transcripts remain in our private marketing database and are not used to train an AI model. A content-free operational alert may be sent through Telegram when a thread is waiting; it contains only an internal thread number, never your message, contact details, company, page or location. We do not sell personal data.
Website chat transcripts are automatically deleted after 90 days of inactivity, and you can delete the current conversation at any time inside the chat. Its browser session expires after 30 days. Contact-form submissions are retained only as long as needed to handle your enquiry and any resulting relationship. Server logs are rotated on a short schedule.
Depending on your jurisdiction, you may have rights to access, correct or delete the personal data we hold about you, or to object to its processing. To exercise them, contact privacy@apposture.com.
apPosture MMC, Jeyhun Salimov 53, Baku, Azerbaijan. Privacy enquiries: privacy@apposture.com.
This policy covers the apposture.com website and the apPosture product's data model. It is provided in good faith; your use of the product is also governed by your license agreement.
From discovery to a proven attack chain. A PoC in your own environment.