Legal

Agreements

• Terms of ServiceThe master agreement for the Prava AI platform. It covers accounts, fees, data use, intellectual property, liability and disputes.
• Module TermsAdditional terms for each module: endpoint, application and cloud, IoT and OT, penetration testing, dark-web threat intelligence, phishing defence, malware analysis, forensics and incident response, compliance, and the Prava AI assistant.
• Data Processing AddendumProcessor terms for personal data we handle on a customer's behalf. It covers security measures, sub-processors, breach notification, transfers and deletion.

Policies

• Privacy PolicyWhat personal data we collect, why, how long we keep it, and how to exercise your rights under the DPDP Act, GDPR and other laws.
• AI and Data Use PolicyHow Prava AI processes data in real time, collects analytics and improves its models, and the safeguards and options that apply.
• Acceptable Use PolicyWhat the platform may and may not be used for: authorised targets only, no attacks on third parties, and rules for malware, leaked data and AI.
• Regional Privacy NoticesSupplements to the Privacy Policy for India, the EU, the UK, the US, Canada, Australia, Japan, China and other jurisdictions: rights, regulators and contacts.
• ComplianceOur current status, the security frameworks and privacy laws Prava AI is designed to align with, data residency and breach-reporting timelines.
• Cookie PolicyCookies, local storage and similar technologies on prava.dev and in the platform, and how to control them.
• Responsible disclosureHow to report a vulnerability in Prava AI or our own systems, and what we commit to in return.

Company details

• Headquarters (India): SwiftSafe Cybersecurity Technologies India Pvt Ltd, a private limited company incorporated in India
• United States office: SwiftSafe LLC, a limited liability company registered in Wyoming, serving customers in the Americas
• Product: Prava AI
• Legal enquiries: legal@prava.dev
• Privacy enquiries: privacy@prava.dev
• Grievance Officer: grievance@prava.dev
• Security reports: security@prava.dev

Which company you contract with

SwiftSafe is headquartered in India and has a United States office, SwiftSafe LLC. If your organisation is based in the Americas (the United States, Canada, Mexico, Central and South America, and the Caribbean), your contract is with SwiftSafe LLC. If it is based anywhere else, including India, your contract is with SwiftSafe Cybersecurity Technologies India Pvt Ltd. Your Order Form names the contracting company. In these documents, "SwiftSafe", "we" and "us" mean that contracting company. Whichever company you contract with, the documents are governed by the laws of India and disputes are resolved by arbitration in India, as set out in the Terms of Service.

Where your data is kept

We store and process each customer's data only in data centres in that customer's own region. The region is chosen at onboarding or set in the Order Form. This covers Customer Data, Telemetry and Personal Data, including forensic evidence, email content and malware samples. Model training and fine-tuning on a customer's data also happen within that region. The only things used across regions are non-personal security artefacts, such as indicators of compromise, file hashes and detection signatures, after any Personal Data and confidential customer information has been removed. They are used to protect all customers. Details are in the Data Processing Addendum and the AI and Data Use Policy.

Changes to these documents

Each document shows the date it was last updated. We tell customers about material changes in advance by email or in the platform, as set out in the Terms of Service. If you have agreed signed terms with us, such as an Order Form or a negotiated Data Processing Addendum, those terms take precedence where they differ from the documents published here.