Snapshot 112460
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Help center Welcome to Limy Intro to Limy Your First 30 Days with Limy Scaling and Optimizing with Limy Onboarding Check-list Dashboard Overview How Limy Generates Prompts Prompts Overview Competitors Sentiment Score Analysis Source Analysis Owned Sources Earned Citations Recommendations Monitoring AI Traffic Monitor Attribution Agent Monitor (CDN-Based Data) Glossary Filters Settings Users & Roles Brand Kit CMS Integration Limy MCP Deleting Competitors Adding Competitors Frequently Asked Questions Trust Center Limy Plans How to Switch Plans Limy Free Trial How to Deactivate your Account Limy Custmer DPA APM 18.5.26 (1) Powered by GitBook For the complete documentation index, see llms.txt. This page is also available as Markdown. Security and privacy at Limy Limy primarily processes Customer business and analytics data: Brand-performance metrics, AI-search visibility data, website analytics, content, product, marketing, and related information provided by customers. Public AI-search data: Publicly available AI-generated search results and LLM recommendation outputs that Limy monitors for customers. Limy also processes limited personal data needed to operate the service, including user account and authentication information and technical identifiers. If a customer implements Limy's CDN integration or GTM pixel, Limy may process IP addresses as a data processor on the customer's behalf. Limy does not process special categories of personal data as part of its standard services. More information is available in Limy's Data Processing Agreement. Security controls Encryption Customer data is encrypted in transit using TLS 1.2 and is encrypted at rest using industry-standard encryption. Access controls Limy uses role-based access control and the principle of least privilege. Access to customer data is limited to authorized personnel who require it for their work. Limy requires multi-factor authentication for systems that provide access to customer data, including production infrastructure, source-code repositories, and build tools. Personnel security All employees receive annual security-awareness training. Confidentiality obligations are included in employment agreements. Monitoring and incident response Limy maintains security-monitoring and incident-response procedures. Under the Data Processing Agreement, Limy notifies affected customers without undue delay and no later than 48 hours after becoming aware of a confirmed security incident involving customer data in Limy's possession or control. No security incidents were identified during the SOC 2 audit period from December 1, 2025 through February 28, 2026. Compliance SOC 2 Type II Limy completed a SOC 2 Type II examination for the period from December 1, 2025 through February 28, 2026. The examination covered controls relevant to Security, Availability, and Confidentiality. The examination was performed by Kost Forer Gabbay and Kasierer, a member firm of Ernst & Young Global Limited. The auditor concluded that the covered controls were suitably designed and operated effectively during the audit period. GDPR and international data transfers Limy maintains a GDPR compliance program and offers a Data Processing Agreement that includes Technical and Organizational Measures. The European Commission recognizes Israel as providing an adequate level of protection for covered personal-data transfers. Limy's Data Processing Agreement also includes Standard Contractual Clauses for applicable transfers to countries that are not recognized as providing an adequate level of protection. Business continuity and recovery Limy maintains business-continuity and disaster-recovery procedures. Metric Commitment Recovery Time Objective (RTO) 12 hours Recovery Point Objective (RPO) 24 hours Monthly uptime commitment 99.5%, subject to the terms and exclusions in the Service Level Agreement Penetration testing and vulnerability management Limy conducts penetration testing at least annually. High-severity findings are investigated and remediated through Limy's software-development lifecycle or other appropriate measures. Limy also performs continuous vulnerability assessments across its production environment, infrastructure, and network. Vulnerability scanning is integrated into the software-development process. Infrastructure and service providers Limy relies on a small number of vetted sub-processors for cloud infrastructure, analytics storage, and authentication. The full list, along with their roles and locations, is documented in Limy's Data Processing Agreement, available upon request. Documents Legal and privacy Privacy Policy Cookie Policy Terms and Conditions Data Processing Agreement: Available upon request Security and compliance SOC 2 Type II Report, December 2025 through February 2026: Available upon request (add email) Penetration-testing materials: Executive summary and remediation report available upon request Service and reliability Service Level Agreement: Available upon request Frequently asked questions Does Limy process personally identifiable information? Limy primarily processes customer business and analytics data and publicly available AI-search data. Limy also processes limited personal data needed to operate the service, including user account and authentication information and technical identifiers. If a customer implements Limy's CDN integration or GTM pixel, Limy may process IP addresses as a data processor on your behalf. Is customer data encrypted? Yes. Customer data is encrypted in transit using TLS 1.2 and is encrypted at rest using industry-standard encryption. Does Limy require multi-factor authentication? Yes. Limy requires multi-factor authentication for systems that provide access to customer data, including production infrastructure, source-code repositories, and build tools. Has Limy completed a SOC 2 examination? Yes. Limy completed a SOC 2 Type II examination covering Security, Availability, and Confidentiality for the period from December 1, 2025 through February 28, 2026. Has Limy experienced any security incidents? No security incidents were identified during the SOC 2 audit period from December 1, 2025 through February 28, 2026. Does Limy conduct penetration testing? Yes. Limy conducts penetration testing at least annually. An executive summary and remediation report are available upon request. What are Limy's recovery objectives? Limy's Recovery Time Objective is 12 hours. Its Recovery Point Objective is 24 hours. How does Limy support GDPR requirements? Limy maintains a GDPR compliance program and offers a Data Processing Agreement with Technical and Organizational Measures and Standard Contractual Clauses for applicable international transfers. What access controls does Limy use? Limy uses role-based access control, the principle of least privilege, and multi-factor authentication to restrict access to systems and customer data. PreviousFrequently Asked Questions NextLimy Plans Last updated 2 months ago