Skip to content
Security & trust

Browser QA touches sensitive apps.
Treat it like production access.

Testorim runs real browsers against real web apps. That means the security baseline matters: no AI training on your runs, encrypted sensitive context, organization-scoped data, and network guardrails for browser sessions.

Trust posture

Test data stays your data. Artifacts exist to explain a run, not to feed a training set or create a resale dataset.

Read privacy policy
AI training

Your runs are not training data.

Test instructions, screenshots, traces, reports, console logs, and network context are used to execute and explain your run, not to train a model.

Sensitive state

Cookies and login reuse are encrypted.

Saved browser state, environment cookies, database credentials, and integration tokens are encrypted before they hit storage.

Network safety

Private hosts are blocked.

Browser requests to loopback, RFC1918, link-local, and metadata hosts are blocked so QA runs cannot be turned into an internal network scanner.

Browser isolation

The browser runs alone.

Each run's browser opens in a separate container that holds no application secret, runs on a read-only filesystem with Chromium's sandbox on, and has no network route except a proxy that refuses private addresses.

Tenancy

Project data is organization-scoped.

Projects, procedures, runs, fixtures, environments, and reports are scoped through the organization boundary.

Quick answers

  • Is my test data used to train AI models?

    No. Test instructions, screenshots, artifacts, reports, and run data are not used to train AI models.

  • Do you store login/session context?

    Only when a feature needs it, such as saved login reuse. Sensitive browser state and cookies are encrypted at rest.

  • Can Testorim reach private/internal network targets?

    No. Testorim blocks private, loopback, link-local, and cloud metadata hosts at URL and browser request boundaries, and the browser's only network path is a proxy that enforces the same rule on every connection, redirects included.

  • What happens to my data if I delete my account?

    Your workspaces, runs, screenshots, videos, traces, fixtures and baselines are deleted, and any live subscription is cancelled. Deleting your account in the app triggers it; a request by email is completed within 30 days.

Join the waitlist

What this page is, and is not

This page describes how we build and operate the service today. It is a description, not a warranty, and it is not a certification, audit report or compliance attestation. No method of transmission over the internet and no method of electronic storage is completely secure, so we cannot guarantee absolute security and do not warrant that the service will be free from unauthorised access. Practices described here may change as the product changes.

A passing test is not a security assessment of your application. Testorim runs the steps you describe; it does not certify that your software is secure or fit to release. Your own responsibilities, including your authority to test a target and the data you put into test inputs, are set out in the terms and the privacy policy.