How we handle your data and our security posture

Who we are

ThreatVentures operates https://www.threatharvest.com and related brands such as ThreatChannel and ThreatAcademy. Our mailing address is PO Box 35, Colby, KS 67701, United States. Per our Privacy Notice and Terms, our servers and Services are hosted in the United States; if you access the Services from outside the United States, your information may be transferred to and processed in the United States (and, where we share with vendors, in other countries as described in the Privacy Notice). Our Terms of Service are governed by the laws of the State of Kansas. The Services are intended for users who are at least 18 years of age; we do not knowingly collect personal information from children under 18.

For the full legal documents, see our Privacy Notice and Terms of Service.

Security controls

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Transmission of personal information to and from our Services is at your own risk; you should only access the Services within a secure environment.

ThreatHarvest is built on layered defenses. Here are examples of how we approach security.

Infrastructure Security

• Hosted on a major cloud provider on hardened systems with minimal footprint.
• Internet traffic passes through a web application firewall with access rules and filtering.
• Network firewalls restrict direct access to the platform's internal services.
• Collection from adversarial and untrusted sources runs in an isolated environment.
• Operational security practices are applied to adversarial collection to protect core systems.

Data Security

• Connections to our database require encryption, and access is controlled.
• Payments are processed by a PCI-compliant provider so we do not store card details.
• Sign-in and required email verification are handled by an established identity platform.
• Each platform component uses its own database credentials with restricted permissions.
• Customer data is separated by organization, with access enforced at the app layer.
• We use a combination of self-hosted and cloud-based language models.

Questions & reporting

For privacy questions, security concerns, or other trust-related inquiries, email support@threatharvest.com, or write to ThreatVentures, PO Box 35, Colby, KS 67701, United States.

Aligned to our Privacy Notice and Terms.

The Privacy Notice and Terms of Service are authoritative. This page is not a substitute for either of them.