Security & Privacy
How we protect your data and your clients' data.
Infrastructure
CommandSEO runs on Hetzner Cloud (EU data centres) behind Cloudflare. All traffic is encrypted with TLS 1.2+. Data at rest is encrypted with AES-256.
Google Search Console integration
The GSC integration uses OAuth 2.0 read-only scopes. We store only the access token and refresh token — no GSC data is persisted on our servers. Tokens are encrypted at rest and can be revoked at any time from your Google account settings or from CommandSEO settings.
AI: no training on your data
CommandSEO's analysis is powered by AI (Anthropic's Claude). We send only the content needed to perform the analysis you ask for, and it is used to generate your results — never to train AI models, ours or anyone else's. We do not sell your data or use it for advertising.
Access controls
Row-level security on every table. Staff access to production data requires a break-glass procedure and is logged. We do not access your crawl data or site content unless you ask us to diagnose a specific issue.
Sub-processors
We use a small, audited set of sub-processors. A full list is available on request at sub-processors list.
Report a vulnerability
Please email security@commandseo.app. We aim to acknowledge reports within 24 hours and resolve critical issues within 7 days.
Get Search-Ready
for the AI Era.
AI still needs to find you before it can cite you. Start with the foundation.
Start free →No credit card to start.