Shellvoide Trust Center

Security is what we do, and how we operate. Explore our compliance posture, security controls, policies, and platform architecture.

disclosure@shellvoide.com·Privacy Policy

Shellvoide is a cybersecurity company providing offensive security services and the KLUE penetration testing platform to clients across enterprise, SaaS, and government sectors. Protecting the confidentiality, integrity, and availability of information is fundamental to everything we do.

Our Information Security Management System is certified under ISO/IEC 27001:2022 and reviewed at least annually. Accountability for information security sits with Shellvoide's executive leadership. Sensitive documents are available to customers under NDA.

Compliance

ISO/IEC 27001:2022

Certified

SOC 2

Planned

PCI DSS

via Paddle

GDPR

Planned

NIST CSF

Aligned

Resources

View all

Current Documents

Information Security Policy Download
ISO/IEC 27001:2022 Certificate
Network & Data Flow Diagrams

Updates

View all

CertificationAugust 2026

ISO/IEC 27001:2022 certified

Shellvoide is now ISO/IEC 27001:2022 certified. The certificate is available on request.

PolicyAugust 2026

Information Security Policy Statement published

Shellvoide's public Information Security Policy Statement is now available. Reviewed at least annually.

FAQ

View all

How does Shellvoide handle client engagement data?

Client data is stored in an isolated workspace restricted to named testers, encrypted in transit and at rest. Ephemeral environments destroyed on completion. No data used to train models or shared across engagements.

Is my data used to train KLUE's models?

No. Client data is never used to train our models. Training controls enabled where available. For sensitive workloads, models can run so data never leaves a controlled environment.

What certifications does Shellvoide hold?

Shellvoide is ISO/IEC 27001:2022 certified, compliant with GDPR, and aligned with NIST CSF. PCI DSS is fully outsourced to our payment processor. You can request a copy of our certificate from the Resources section.

How do I report a vulnerability?

Email disclosure@shellvoide.com. We acknowledge within 2 business days and coordinate disclosure after a fix.

Subprocessors

View all

Cloud Hosting

Germany

AWS & Contabo for hosting the KLUE platform and infrastructure.

Database & Object Storage

Germany

Supabase for managed database and blob storage.

AI Model Providers

Global

Frontier & Open Source models for LLM processing.

Source Control

GitHub for connected repository scanning.

Found a security vulnerability?

We respond promptly and work collaboratively toward resolution, consistent with responsible disclosure practice.

disclosure@shellvoide.com Disclosure policy