# Data Protection and Retention

Mobb is a security-centric platform, and as such places the utmost importance on data security. This document aims to provide transparency on how your data is handled at Mobb and what policies are there to safeguard your data.

Mobb has also completed SOC 2 Type II assessments. Access to the assessment reports can be requested by contacting us at <support@mobb.ai>.

## User-supplied data

To provide automated fixes Mobb must have access to the relevant vulnerability reports and the code needed to be fixed.

Mobb only uploads to its servers files that were highlighted in the vulnerabilities report. It does not upload the entire code base.

## Data Retention

The vulnerability reports and the relevant code sections are stored on our servers for up to 2 weeks, after which will be deleted permanently. This retention policy can be customized per customer requirements.

## Data Protection

Mobb employs state-of-the-art protection for both data in-flight (TLS 1.2 or greater) and data at-rest (AES using 256 bits keys or greater).

## AI Policy

We are committed to safeguarding the privacy and security of our customers' data. As part of our dedication to ethical and responsible practices, we have established a clear policy regarding the use of AI technology within our operations.

* **Non-Disclosure of Customer Data**: We do not share customers' data with third-party AI providers, ensuring that sensitive information remains confidential and protected.
* **No Customer Data for AI Training**: Our commitment extends to the ethical use of AI, as we strictly prohibit the utilization of customer data for AI training or fine-tuning purposes.
* **Stable Fixes**: While we leverage AI as part of our fix implementation process, all fixes with the "stable" designation must follow deterministic algorithms and industry best practices around fix implementation. As such, [stable fixes](/mobb-user-docs/supported-stable-fixes.md) are safe in terms of the potential of introducing new issues as seen in various published research on the use of AI in coding or in security, including an analysis conducted by our security researcher as seen in the following [Blog article](https://mobb.ai/blog/chatgpt-in-vulnerability-remediation-a-comparative-analysis).


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.mobb.ai/mobb-user-docs/more-info/data-protection-and-retention.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
