Polign.com positions itself as a memory layer for AI agents, promising data control and cost efficiency. But for a cloud infrastructure startup, trust depends on more than a slick homepage. Most legitimate SaaS companies in this space have clear privacy policies, terms of service, and a track record of security practices — Polign lacks all three. The exposed .git directory is a genuine vulnerability that could expose source code or credentials, which is worrisome for a service asking users to hand over memory data. The domain is only two months old, and there are no independent reviews or social media presence to corroborate its claims. If you're evaluating Polign for a design partner program, treat it as an early-stage experiment with significant risks. A company that can't secure its own website isn't ready to host your agents' memories. Is polign.com a scam? Not necessarily, but it's not ready for production use either.
In plain English
I'd approach polign.com with caution. The biggest red flag is an exposed internal file that could leak sensitive information — a critical issue for any software company. Combined with a brand-new domain and no privacy policy, there's not enough transparency to trust it with your data yet.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
A serious vulnerability was found: sensitive internal files are publicly accessible. That's a major concern for a service that will handle user data. While the SSL and basic protections are fine, this weakness overshadows them.
The domain is only two months old, which is very young for a business offering cloud infrastructure. There's no social media presence or visible company background, making it hard to verify who's behind it.
No blacklist issues and a decade-old web archive history suggest the domain has existed before, but there are no independent reviews or Trustpilot presence to gauge user experience. It's a mixed picture.
The site has an about page and contact info, but lacks a privacy policy and terms of service — important omissions for a tech company. A new startup that doesn't explain its data practices is hard to trust.
No privacy policy or terms of service found. For a SaaS that collects user data (memory for AI agents), this is a significant compliance gap, especially if it serves users in jurisdictions with data protection laws.
Solid hosting on Cloudflare with fast load times and proper email authentication. DNSSEC isn't enabled, but that's common for new sites. The infrastructure itself is standard and functional.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.