Privacy notice

Last updated October 7, 2026

Data processed

Account identity, workspace configuration, operating permits, approval decisions, incident records, runtime action metadata and evidence fingerprints.

Purpose

To operate the governance service, secure accounts, produce requested evidence and support billing when enabled.

Retention and deletion

Workspace owners can select a delivery-payload retention window. Evidence hashes are retained until workspace erasure. Deletion requests have a seven-day cancellation window and require a second owner confirmation; erasure is permanent through the app. Legal, security or billing obligations may require limited records to be retained longer.

Subprocessors

Email, billing and independent timestamp providers are only used when configured by the service operator. Their active status is shown in Production Center.

Your choices

Workspace owners can export operational records, revoke integrations and team access, change retention, or request deletion.

Before public commercial launch, counsel should review entity-specific terms, jurisdiction, support contact, subprocessor list and regulatory commitments.