Draft for review by counsel — not yet in effect.
Security
How Nymbrink protects your data and its own signatures. To report a problem, see responsible disclosure below.
Your data stays yours
Every table in Nymbrink’s database has row-level security, and the screens you use read your company’s data through it, so the database itself refuses to return one company’s rows to another. The few server tasks that need wider access — running checks, delivering alerts — go through a single, tested read path, and a test with a second account confirms it sees nothing of the first. The agents you watch, your rules and your decisions are never visible to any other customer, and public pages never show who asked to watch an agent.
Hosted in the EU
The application and database run in Frankfurt, Germany. The one exception is email delivery, which uses a US provider. All are listed on the subprocessors page and in Nymbrink’s own signed passport. Traffic is encrypted in transit.
Nymbrink’s signing key
Stamps are signed with an Ed25519 key held outside the application database, so reading the database is not enough to forge a stamp. Anyone can check a stamp with the public key, without an account.
We never hold your agent’s private key
Passports are signed on the publisher’s own machine or in their browser. The private key is never sent to Nymbrink — not when making a passport, and not when proving that a passport is yours.
Out of your traffic
Nymbrink is never in your request path. It fetches only public addresses, at low frequency, and identifies itself in its User-Agent with a link to why it fetched the page. It never calls an agent’s working endpoints.
Signed webhooks
Every webhook call carries X-Nymbrink-Timestamp and X-Nymbrink-Signature, an HMAC-SHA256 of the timestamp and body under a secret only you and Nymbrink hold. Verify it, and reject old timestamps, before trusting the call.
No training on your data
No customer data is used to train AI models.
Responsible disclosure
If you find a vulnerability, write to security@nymbrink.com with enough detail to reproduce it. Please do not access other people’s data, disrupt the service, or make the issue public before we have had a reasonable chance to fix it. We will acknowledge your report, keep you informed, and not pursue anyone who reports in good faith under these rules.