Zero Retention Security Model

Privacy Policy & Client Data Governance

Lightlab engineers security solutions designed to uphold the highest standards of confidentiality. We enforce strict data minimization, cryptographic isolation, and zero permanent retention of client codebase artifacts.

Last Updated: June 2024 • Jurisdiction: Vietnam (Decree 13/2023/ND-CP) • Zero Third-Party Trackers
PRINCIPLE 01

Zero Code Retention (ZDR) Guarantee

Client proprietary source code analyzed during static code audits (SAST) is processed in ephemeral, isolated sandboxes and automatically wiped from memory upon report generation.

PRINCIPLE 02

Cryptographic Isolation & Transit Security

All transmissions between client repositories and Lightlab security workers enforce TLS 1.3 encryption and ephemeral API tokens. Storage of sensitive credentials is strictly prohibited.

PRINCIPLE 03

Compliance with Decree 13/2023/ND-CP & GDPR

We comply fully with Vietnam's Personal Data Protection Decree (Decree 13/2023/ND-CP) and international data governance principles. We never sell, monetize, or utilize client data for model training.

PRINCIPLE 04

Data Subject Rights & Governance Desk

Clients and researchers retain full rights to request verification, rectification, or complete deletion of contact details or audit interaction records by emailing admin@lightlab.work.

Privacy Officer & Inquiries

For Data Protection Addendums (DPA), deletion requests, or compliance inquiries under Vietnam Personal Data Protection regulations, please contact admin@lightlab.work.