Trust
Trust and data handling
Operating principle
Persidian agents act inside the systems where risk lives. Write-back and execution are gated per product — see each agent entity page for specific approval boundaries. The Business X-ray follows the same pattern: show what was found, label what was inferred, and ask only what the public web cannot answer.
Business X-ray — saved reports
If you choose to save a shareable report, we store the recommendation, your answers, and public scan findings for up to 30 days. Reports are accessible only via an unguessable link. Optional email is used only for follow-up if you provide it.
Recommendations on saved reports are recomputed on the server from your confirmed findings. Product names, URLs, and scores cannot be forged from the browser.
Each saved report includes a deletion token. Use it with DELETE /api/reports/[id] or email [email protected] to request removal.
Business X-ray — URL scans
When you submit a company website, Persidian inspects public pages only — typically the homepage plus up to four high-signal paths (about, integrations, security, and similar) when robots.txt allows. No login, no changes to your site, and no email required to start. Scans are anonymous and ephemeral unless you choose to save or share a report.
- We read publicly accessible HTTP/HTTPS content and respect robots.txt.
- We do not attempt authenticated areas, private networks, or localhost targets.
- Per-IP and per-target-domain rate limits apply to prevent abuse.
- Outbound fetches pin DNS results for the duration of a scan and throttle concurrent requests per host.
- Deletion: close the session or email [email protected] to request removal of any saved report.
Model providers
Diagnostic explanations and concierge chat may use third-party LLM providers (OpenRouter, NVIDIA NIM) when API keys are configured. Prompts include only what you share in the diagnostic or chat — not your full website crawl unless you explicitly include it in a message.
Retention and logging
Anonymous X-ray sessions are not persisted by default. Contact form submissions and demo requests are retained only as long as needed to respond. Server logs may include IP addresses for rate limiting — see Privacy.