Incident #2BDB7E · 17 DEC 2025minor
Kivra adds vulnerability testing and new independent security recipients to its security data processing
The security-measures row now includes vulnerability testing of Kivra's systems. It also adds network and information service providers within the EU/EEA, acting as independent data controllers, as recipients of the IP address data. The data collected (IP address), legal basis and 45-day retention are unchanged.
Taken from you
- IP address data may now also go to network and information service providers acting as independent data controllers
- Security purpose widened to include vulnerability testing of Kivra's systems
Evidence · 3 of 3 quotes matched in source
Network and information service providers that provide services within the EU/EEA to protect the Kivra Service and act as independent data controllers.+ inserted · ✓ matched in source
such as network segmentation, DDoS protection and vulnerability testing of our systems to detect and address any security vulnerabilities in Kivra's Service+ inserted · ✓ matched in source
Archived version ↗ · 218 words changed