Trust & Security Center
Security & Subprocessors
Last updated: 2026-10-02
1. Four-Pillar Security & Approval Architecture
Zero Unapproved Writes
Radars and work orders produce inspectable diffs and receipts. Nothing mutates your repo or live site without explicit human approval.
End-to-End Encryption
All traffic runs over HTTPS/TLS 1.3. Diagnostic artifacts and workspace ledgers are encrypted at rest via AES-256 on Google Cloud.
Least-Privilege Tokens
Search Console and analytics connections request read-only scopes and are never exposed in public shareable receipts.
Deterministic Retention
Paid audit artifacts are retained for 12 months and deleted on request at any time via our support and export surfaces.
2. Dated Subprocessor Directory (Updated 2026-10-31)
Launchfiles uses the following infrastructure and billing subprocessors to operate its standalone radars and invited workspace missions:
| Subprocessor | Purpose | Data Processed | Region & Posture |
|---|---|---|---|
| Google Cloud Platform (Cloud Run & Cloud Storage) | Isolated stateless execution containers and AES-256 encrypted artifact storage | Submitted public URLs, diagnostic receipts, workspace state | United States / European Union SOC 2 Type II · ISO 27001 |
| Stripe | Subscription billing and prepaid credit pack checkout settlement | Billing email, payment method tokens, statutory invoice records | United States / Global PCI-DSS Level 1 |
| Google Analytics 4 & Microsoft Clarity | Public marketing telemetry and first-screen UX diagnostics | Pseudonymous page views and viewport interaction events | United States / European Union DPA Standard Clauses |
3. Data Retention & Deletion Windows
- Paid site audit: the web address, your email, and the report are kept 12 months after delivery, then deleted.
- Payment records: kept 10 years, as French accounting law requires.
- Anything else we hold about you (for example a waitlist sign-up or an email you sent to support): kept until you ask us to delete it.
4. Vulnerability Disclosure & Operator Identity
To report a security issue or request data deletion, email socials@launchfiles.app or inspect our machine-readable /.well-known/security.txt policy.
Launchfiles is a trade name of Launchfiles Operations, auto-entreprise (French sole proprietor).
Launchfiles Digital Services
SIREN: Registered Entity
APE: 73.11Z · Activity start: 08/09/2025
SIRET: Registered Entity
VAT: TVA non applicable, art. 293 B du CGI (franchise en base de TVA, no VAT number)
Operator: Launchfiles.