Trust & Security
Malva.RE is built for professionals who handle sensitive files. Here is, factually, how the platform treats your data.
Static analysis, no execution
Malva.RE performs static and structural analysis only: submitted files are parsed and dissected, never executed or detonated.
Who can see your submissions
Visibility depends on your plan:
| Plan | Submissions and reports |
|---|---|
| Free | Public — anyone can view them. Do not submit confidential files on the free plan. |
| Essential, Premium, Teams & enterprise | Private to your account or your team. |
See the FAQ and the pricing page for plan details.
Where your data lives
The SaaS platform is hosted on Microsoft Azure in the European Union. If your organization requires full control over where samples are stored and processed, an on-premise version of Malva.RE is available.
How your data is protected
- Encryption at rest and in transit for your submissions and their analysis results.
- Logged access to the platform.
Retention
Files extracted from a submission during analysis (embedded scripts, payloads, archive members…) are kept for 30 days.
Subprocessors
| Subprocessor | Purpose |
|---|---|
| Microsoft Azure (EU regions) | Hosting of the platform, storage of submissions and reports |
| Stripe | Payment processing for subscriptions — Malva.RE does not store card details |
| AI provider | AI summaries (MalvaGPT), on paid plans only. Only the analysis report is sent — never the sample itself. |
GDPR
Malva.RE is designed to comply with the GDPR and other applicable data protection regulations, and strives to be transparent about how data is used and processed.
Policies
The Privacy Policy, Cookie Policy, Terms and Conditions and the Legal notice are available at any time — they are also linked in the footer of every page.
Who is behind Malva.RE
Malva.RE is published by YNEOS, a French cybersecurity and secure software development company based at Savoie Technolac (Le Bourget-du-Lac, France).
Security contact
A question about security, or a vulnerability to report? Reach us through the contact form. Our security.txt file follows RFC 9116 (also published on app.malva.re).
Status and changes
- Platform status: web application, analysis engine, last completed analysis, current notices.
- Changelog: what changed on the platform, by deployment date.