// Trust & Security Report
Andi (LazyWeb Inc.)
AI-powered search engine with privacy-first architecture. Products: Andi Search Engine (consumer/web search), Trantora (proprietary search index), Search API (developer tool for AI agents).
Certifications held
0
Maturity
Startup
Trains on your data
No
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
> Show 6 unconfirmed / not-held certifications
source: andiai.comNo public evidence; security audits planned post-beta launch per privacy policy.
source: andiai.comNo public evidence; security audits planned post-beta launch per privacy policy.
source: andiai.comNo public evidence found on vendor domain or trust documentation.
source: andiai.comPolicy states 'Account features are not currently offered in EU/UK' and acknowledges 'compliance with applicable data protection laws' but provides no evidence of formal GDPR certification or audit.
source: andiai.comNo public evidence; not applicable - product is a search engine with no health data handling scope.
source: andiai.comNo public evidence; payment processing not a primary product focus.
// Privacy & AI training
Trains on customer data
No
Data processing agreement
Not offered
Data region
United States (US-based company; EU/UK account features not currently offered)
Product is an AI search engine (uses LLMs internally) but does not train on customer search queries. Privacy-first architecture: the privacy policy states searches are 'completely private and not logged' and that Andi does not track users or save searches. No mention of using user search data to train models.
// Security controls
No Tracking
Yes - anonymous searches not tracked; no tracking cookies; no third-party analytics
andiai.comThird-Party Data Sharing
Minimal - only where 'strictly necessary to provide the service'; no data brokers; no ad networks
andiai.com// Products & data scope
data: Search queries (not retained for anonymous users); user profile data (for optional accounts; minimal)
Available as web app at andisearch.com and Chrome extension. Anonymous users: no tracking, no data retention. Paid/account users: optional cloud storage with saved preferences. Version 0.8.0 (beta).
data: Public web data indexed; no user-generated content stored
Proprietary search index that analyzes web content credibility and meaning. Not directly user-facing but powers the search engine.
data: API requests and usage logs (for rate limiting/abuse prevention)
Provides clean, structured data for AI agents and developers. No formal SLA or uptime guarantee mentioned.
// What to watch
- Security audits are not yet completed - policy states they are 'planned post-beta launch.' Until audits are published, security claims are unverified assertions.
- GDPR posture is vague and compliance not currently offered to EU/UK residents. No GDPR-specific DPA or standard contractual clauses mentioned. Company does not support EU accounts.
- No Data Processing Agreement (DPA) publicly available. Users must email privacy@andiai.com to request DPA and details on international transfers.
- Early-stage product (version 0.8.0 beta) - security and compliance practices may change. No formal SLA, uptime guarantee, or data retention guarantees stated.
- No formal compliance certifications (SOC 2, ISO 27001) mentioned anywhere. Privacy-first approach is architectural rather than audit-based.
- Identity verification: Legal entity is LazyWeb Inc. (dba Andi), based in San Francisco, YC W22 batch. Multiple domain variants exist (andisearch.com, andiai.com). Assessment is for andisearch.com / andiai.com (confirmed via privacy policy, About page, and Y Combinator listing). No entity named 'Andi Inc.' exists.
// At a glance
Pricing model
Freemium: free search engine with optional paid plans for enhanced storage/features; no ads
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Andi (LazyWeb Inc.)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-06. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
andiai.com