Privacy Policy

Last updated: July 2026 · Template — review with counsel before launch.

The short version

The depproof scanner runs on your own infrastructure. It does not send your source code, dependency data, SBOMs, or scan findings to us or any third party. What you scan stays with you.

This website

depproof.com is a static marketing site operated by itsnotbug, LLC. If analytics are enabled they are privacy-preserving and aggregate only; we do not sell personal data. If you email us, we use your message and address solely to reply.

The product

depproof is self-hosted. Advisory and license data is fetched from public open-data sources (such as OSV.dev). Any hosted control-plane offering (depproof-hub) is deployed within your infrastructure, so governance evidence remains on your own infrastructure.

Contact

Questions about privacy? Email hello@depproof.com.