Risk Notice
In short: a Safe2Vibe review makes your app much safer, but no review, human or automated, can prove that an app has no vulnerabilities. Security is ongoing, and you stay responsible for your app.
We want you to understand exactly what you get from Safe2Vibe, and what you don't. This notice is part of our Terms of Service.
1. No review finds everything
Automated scanners and human reviewers both miss things. New vulnerabilities are discovered every day in libraries, platforms and AI tools. A review reflects what we were able to observe, with the access you gave us, on the date it was performed.
2. Your app changes
Every change you or your AI tool makes can introduce new problems, including when you apply one of our fix prompts. A clean report on Monday says nothing certain about the code you publish on Tuesday. That's why we re-scan when your app changes and why the Seal must be renewed.
3. Fix prompts are suggestions
Our prompts describe what should be fixed and how. AI coding tools may implement them incorrectly, partially, or in ways that break other features. Always review the change, test it, and keep backups before publishing. Re-check each fix with the Service.
4. What we can't see
A review is limited by its scope and access. Unless explicitly included, we don't review:
- third-party services your app depends on, such as Supabase, Firebase, Stripe, hosting or AI providers;
- your team's devices, accounts, passwords or internal processes;
- physical security, social engineering or phishing risks;
- the legal content of your terms, privacy policy or business practices.
5. Not legal, compliance or financial advice
Safe2Vibe is not a law firm or an accredited auditor. Mentions of laws such as GDPR, CCPA, LGPD or Habeas Data, or standards such as OWASP, SOC 2, ISO 27001, PCI DSS or HIPAA, are general information to help you prioritize. A Safe2Vibe review or Seal is not a certification of compliance with any law or standard. For legal obligations, consult a qualified lawyer.
6. Shared responsibility
| Safe2Vibe is responsible for | You are responsible for |
|---|---|
| Performing the review with reasonable care and skill, following the Safe2Vibe standard | Owning or being authorized to test the app |
| Explaining findings clearly and suggesting fixes | Deciding which fixes to apply, applying them and testing them |
| Keeping your information confidential and secure | Keeping your credentials, keys and accounts secure |
| Telling you when a re-check passes or fails | Telling us about major changes, and keeping your app re-scanned |
| Revoking the Seal if your app stops meeting the standard | Displaying the Seal only while it's valid |
7. Severity ratings are guidance
We rate findings as Critical, High, Medium or Low to help you prioritize. The real impact depends on your business, data and users, which you know better than we do.
8. Liability
Our responsibility is limited as described in the Terms of Service. In particular, we are not liable for losses caused by a security incident in your app, including incidents involving issues we did not detect.
If you have questions about what a review covers, ask us before you rely on it: hello@safe2vibe.com.