Designed for easy adoption.
A factual page. Designed to answer your security review’s first ten questions before you ask.
One operating entity.
ImposterHunter AI LTD
Dubai International Financial Centre (DIFC), Dubai, UAE. Registered number 13635, commercial licence CL13635, a private company incorporated under the DIFC Companies Law. Contracting party for all customers worldwide.
Bucharest, Romania
Engineering and research operations in the European Union — where the detection engine is designed, built, and hardened.
Where we are. Where we're going.
| Framework | Status | Target | Auditor |
|---|---|---|---|
| SOC 2 Type II | In progress | Q4 2026 | Under selection |
| ISO 27001 | Planned | 2027 | Pending |
| HIPAA-ready architecture | Active | Pending | Pending |
| EU AI Act Art. 25 alignment | Active | Pending | Pending |
| GDPR · CCPA | Active | Pending | Pending |
Who we run on.
| Vendor | Purpose | Region |
|---|---|---|
| AWS · Bedrock | Compute & inference | US-East / EU-Central |
| Google Analytics 4 | Aggregated traffic measurement (consent-gated, IP anonymized) | EU (Google Ireland) → US (SCCs) |
US or EU. By design.
Region pinning is part of the multi-tenant provisioning model shipping with customer accounts; no cross-region replication without explicit opt-in.
Errors return errors.
Real signals only. Your application decides how to handle the open case; you stay in control of the policy.
OIDC-only CI/CD.
Short-lived credentials only, rotated per workflow, scoped to the deploy.
Stop deception before it reaches you.
Book a 30-minute call. We’ll walk through your actual deployment and show you what we’d catch.