Trust center
What we implement, what is ready pending review, and what we do not claim. No absolute security is promised; no SOC 2 / ISO / HIPAA / PCI certification is claimed. Controls below link to the Privacy Policy, DPA draft, and Cookie Policy for detail.
Server-authoritative consent ledger, global rights baseline (access, correct, export, delete, restrict, object, withdraw, opt-out, limit, grievance), Settings → Privacy & Data control center, GPC detected and recorded server-side (no sale/share pipeline exists to gate).
TLS everywhere; AES-256-GCM for OAuth tokens and 2FA secrets only; Argon2 password hashing; HMAC-signed backups (integrity, not confidentiality); least-privilege admin with audited impersonation; scoped support views.
DPDP staged-commencement aware; GDPR-ready rights with one-month semantics; California rights where applicable (45-day know/delete/correct; shorter opt-outs). Engineering does not make final legal determinations — see Legal review list in program docs.
Primary store IN; residency, transfer, processing, and access tracked separately per processor. No EU/IN residency claim beyond actual infrastructure. Future IN/EU/US abstraction exists without claiming it today.
Minimum-necessary prompts; no secrets in prompts; user-scoped embeddings deleted on erasure; optional improvement OFF by default with separate choice and withdrawal. Significant-effect automated decisions documented where present, with opt-out, human review, and explanation.
Backups expire by routine overwrite (≤90 days, Strategy A) and are never restored into production without replaying erasures. Restores preserve access control, retention, secret rotation, and audit continuity.
Privacy: [email protected] · Security: [email protected]. Report vulnerabilities with scope, impact, and reproduction; we acknowledge receipt and publish response targets in the disclosure policy. No bug bounty is offered.
DPA (draft — pending legal review) · Privacy Policy · Cookie Policy · Terms.