Security & data handling
Your data, our posture
MockDeck processes the inputs you submit to generate mocks. This page states, plainly, what we handle and what we do not claim.
What we handle
endpoint descriptions, output format, and auth style used to generate your mock.
Data handling commitments
- Submissions run the product pipeline and are retained only as long as needed for your audit log (paid tiers) or until you delete the run.
- We apply access controls consistent with GDPR Art. 32 (security of processing) where personal data is processed.
- BYOK keys (Enterprise), when offered, are stored server-side only and never exposed to the browser.
Honesty rule: MockDeck turns a description into a candidate mock. We do not guarantee the mock matches your production API, covers every edge case, or replaces contract tests. We do not claim guarantee / 100% / never miss.
Our posture
- MockDeck is a drafting aid, not a certified conformance service.
- For contract guarantees, validate against your production API and your contract tests.
Subprocessors & payments
- Payments are processed by Waffo Pancake (merchant of record).
- See Privacy and Terms for full terms.
refs: OpenAPI 3.1 specification · Postman collection format