← Back to Covault

Privacy Policy

Last updated: October 24, 2024

Covault Engineering ("we", "us") is committed to protecting the operational integrity and privacy of our clients. This policy outlines how we handle data within the Operational Intelligence OS.

1. Data Collection & Usage

We collect data strictly for the purpose of executing the agreed-upon services. This includes operational artifacts (documents, emails) ingested via API connectors. We do not sell data. We do not use client data to train public foundation models.

2. Infrastructure & Security

All client data is stored in single-tenant AWS environments isolated to the client's organization. Data is encrypted at rest (AES-256) and in transit (TLS 1.3).

3. Data Retention

We retain data only for the duration of the active service agreement. Upon termination, clients are provided a "Golden Record" export, and the tenant environment is securely erased within 30 days.

4. Contact

For privacy concerns or Data Processing Agreement (DPA) requests, please contact security@covault.engineering.