Privacy policy

What ProofTrail and this website do with your data, in plain language. Last updated 30 October 2026.

The short version#

• ProofTrail runs on your server. Your compliance data, evidence, policies and staff details stay there, and its developer never sees them.
• ProofTrail's one connection to its developer is a daily license check with account.laibe.cc.
• This website counts visits without cookies.

Who this covers#

This policy covers the ProofTrail software you install, its license check, and this website. Inside your installation, your organization decides what is collected about your staff, auditors and trust center visitors, and is responsible for it.

Your license#

To activate a license, ProofTrail sends account.laibe.cc your license key, a random id made for the installation, the host name of its address, and its environment and PHP version. The server answers with a signed token, and ProofTrail sends it back once a day to check the license still runs. Nothing else goes with it: no compliance data, no names, no usage.

The account at account.laibe.cc holds the email address you bought with, your license and the installations it's activated on, so you can see and deactivate them. Payments go through Stripe, as Link; they never reach ProofTrail's server.

The services you connect#

When you connect an integration, such as your identity provider or your cloud account, ProofTrail talks to that service directly from your server, with credentials you store in it. Those services' own policies apply.

This website#

This site's pages and fonts are served from its own server. It counts visits with Umami, on a server ProofTrail's developer runs at stats.laibe.cc; that tracker is the only script loaded from elsewhere. Umami sets no cookies, and its statistics hold no network address. Each page view records the page, the referring page, browser, operating system, device type, screen size, language, and the country, region and city looked up from your network address. Page views are grouped into visits by an identifier derived from your address and browser that changes every month.

Each count reaches that server through Cloudflare, and the server's access log keeps the request with its network address for a short time, to run and protect the service. That log is capped by size rather than by a number of days. Like any web server, the one hosting this site may also keep basic access logs.

The demo at prooftrail-demo.laibe.cc runs on a fictional company and is reset each time it restarts. Don't enter real information in it.

Changes#

If this policy changes, the new version will be posted on this page with a new date.