Layer8 Co., Ltd. (“the Company”) considers the protection of personal information an important responsibility. This policy explains how we handle information collected through this website and through the penetration testing services we provide (“assessments”).
1. Information We Collect
Information you provide through forms
Through our contact form and report request form we collect your name, email address, company name and the content of your message.
Information collected as you use this site
Where analytics are enabled, we use cookies to collect page views, referrers, browser and device information, and IP addresses. When you submit a form, the URL of the submitting page and the cookie identifier issued by our form provider are sent along with it.
Information handled during an assessment
During an assessment we handle the test account credentials you provide, traffic logs exchanged with the target system, and the evidence recorded for each finding. Depending on the target system, this material may contain personal information.
2. Purpose of Use
- Responding to inquiries and report requests
- Carrying out assessments, preparing reports, and handling retests
- Verifying authorisation for the target assets and retaining the record of the engagement
- Improving this website and our services
- Complying with legal obligations
3. Retention of Assessment Material
- Test account credentials and raw traffic logs are deleted 30 days after the assessment is completed.
- Reports and their evidence are retained for one year from issue.
- On your request, we delete this material promptly, before the periods above.
4. Processors and Disclosure to Third Parties
We do not provide personal information to third parties without your consent, except as required by law. We do engage external providers for the purposes below, under contract and subject to our supervision:
- Receiving and managing inquiries and report requests (customer management service)
- Serving this website and analysing its use (cloud hosting, analytics services)
- Operating the platform used to carry out assessments (cloud infrastructure)
Some of these providers are located outside Japan. The current list of providers is available on request.
5. Where Information Is Held, and Use From Outside Japan
The Company is based in Japan, and information is held in Japan and on the facilities of the providers described above. If you use our services from outside Japan, you agree that your information is transferred to Japan.
6. Use of AI
We use AI developed in-house to carry out assessments. We do not use information entrusted to us, or information obtained during an assessment, to train models.
7. Security Measures
Credentials, traffic logs and evidence are stored encrypted and are accessible only to the engineers who need them for the engagement. We also maintain organisational and technical measures to prevent leakage, loss and damage.
8. Managing Cookies
You can refuse or delete cookies in your browser settings. Some features of this site may not work if you do.
9. Access, Correction and Deletion
To request access to, correction of, suspension of use of, or deletion of your personal information, contact us at the address below. We respond after confirming your identity.
10. Changes to This Policy
We may revise this policy as laws or our services change. Revised versions are published on this page.
Contact
Layer8 Co., Ltd. Email: info@layer8.jp