Frequently Asked Questions

Aletheia operates a multi-threaded asynchronous polling engine. When an investigation is triggered on a target identifier (such as an email address, username, or domain), the platform queries a grid of 29 specialized connectors in parallel. These connectors interface with public search registries, WHOIS caches, domain registries, public blockchain ledgers, and credential leak data. All queries are passive, meaning we only request pre-collected or cached public data without direct contact.

Our core connectors cover multiple intelligence vectors: username checks across 25+ major social networks, WHOIS registration details, DNS configurations, IP geolocations, blockchain transactional ledgers (Ethereum/Bitcoin), dark web paste leaks, and credential breach databases. As each connector returns its payload, our system matches, validates, and hashes the records using SHA-256 to guarantee data provenance before passing them to the AI parser.

Absolutely not. Aletheia operates strictly within the boundaries of passive open-source intelligence (OSINT). We do not perform port scans, execute exploits, run vulnerability checks, or bypass login authentications on target servers. We query only open, public APIs, web caches, and registries. Our operations are fully compliant with standard cybersecurity investigation frameworks.

In almost all cases, no. Most connectors query third-party sources — public search indices, WHOIS/RDAP, breach datasets and threat aggregators — which never touch the target's own systems. A few verification steps do make ordinary, unauthenticated public requests (for example, loading a public profile page or a platform's public sign-up/availability endpoint), exactly as a browser would. Aletheia never attempts authenticated access, password guessing, or any intrusive technique, so a target is not meaningfully alerted, but we don't claim to be invisible.

Every investigation is scoped to your account and enforced with strict per-user ownership checks, so other users can never read your cases. Data is stored in our managed Postgres (Supabase), which encrypts data at rest at the storage layer (AES-256) and traffic in transit over TLS. Note: we do not currently run application-level 'zero-knowledge' encryption — our infrastructure operators could technically access the database, as with any standard SaaS. If you require client-side encryption or self-hosting for sensitive work, contact us.

No. Since all data is encrypted client-side using zero-knowledge secrets and sandboxed inside your dedicated database tenancy, it is mathematically impossible for third parties to audit or dump your target sweeps. You have absolute ownership and control over your dataset.

Once all connectors complete data ingestion, Aletheia compiles the raw evidence into a unified JSON schema. This schema is fed into a secure, sandboxed context window running enterprise LLM models. The model parses the data to correlate platform identities, filter false positives, calculate risk exposure ratings, and summarize findings into an executive intelligence dossier. The resulting report compiles hours of manual analysis into seconds.

Never. We query all AI models via secure enterprise-tier pipelines under strict Zero Data Retention (ZDR) agreements. Your data is sent encrypted, processed transiently in memory, and immediately deleted by the AI provider upon response delivery. It is never logged, cached, or used to train public models.

Lifetime access means you pay once and own access to the platform forever. You will receive all future product updates, security patches, new OSINT connectors, and LLM model upgrades without any monthly subscriptions, usage upcharges, or hidden fees. Your early support locks in your license permanently.

Existing lifetime deal (LTD) holders will be permanently grandfathered. Your account will remain fully unlocked without any subscription requests. We are committed to protecting early backers; founding members will retain all core features and receive priority access to enterprise feature updates.

Yes. You can upgrade from Analyst Pro to Command Center or Agency Arsenal at any time directly through your dashboard. You will only pay the difference between the pricing tiers, and your founding member discount remains locked in.

We offer a full 30-day money-back guarantee. If Aletheia does not fit your recon workflow or meet your security standards, contact our support desk within 30 days of purchase for a full refund, no questions asked.

Yes. Both our Command Center and Agency Arsenal tiers include access to our developer portal and REST API. You can programmatically initiate footprint sweeps on emails, domains, or usernames, fetch raw evidence JSON payloads, or download compiled markdown dossiers to pipe directly into your SIEM, SOAR, or custom case manager.

Yes. The Agency Arsenal tier includes a batch processing engine. You can upload CSV spreadsheets containing lists of targets, and our queue runner will process them concurrently in the background. Once finished, you can download all compiled dossiers and evidence structures in a zipped package.

Yes. The Agency Arsenal tier supports custom connector webhooks. You can define your own API ingestion points and map their returned payloads directly into the Aletheia identity graph and AI dossier context window.