Trust
How we keep your work safe
Where your project runs, what we do to keep it safe, and what happens to your data.
Where your project runs
Your project runs on our own servers: most of it in our data centre in Vilnius, which is built so equipment can be serviced without switching the service off, and some in our own data centre in Kaunas.
Security certification
MB Pikutis is certified to ISO/IEC 27001:2022 (LST EN ISO/IEC 27001:2023), the international standard for keeping information safe. The certificate covers building, launching and maintaining websites and apps, and hosting them. Certificate No. 251.2718 is valid until 22 December 2028 and was issued by UAB SERTIKA.
Security scans before every release
Before a change goes live, the part that will run it is scanned in our Harbor container registry. Every release we deploy is scanned, and one that fails the scan is not deployed. The scan looks for known security problems in the pieces a release is built from: it is a check for known problems, not a promise that a release has none, and a person still reads every change.
Your data and your code
You own what we deliver: the code we write for you is yours. Our working copies of your code are deleted as soon as coding is done, and access to your code is closed when the project ends. Our rule: we keep the least data the service needs, only the people who need it can see it, and we keep it no longer than we need it to do the work and meet our legal duties.
Other companies that handle data for us
The AI models in our pipeline are reached through OpenRouter, a service that passes each request to the model chosen for the project (including models hosted in the EU). OpenRouter is a sub-processor: it handles data on our behalf under the same rules we follow.