Privacy Policy & Security Charter

1. Core Privacy Commitment & Zero-Knowledge Isolation

DecisionVault ("we", "us", or "our") operates as a cloud-native enterprise AI decision intelligence platform accessible via decision-vault.com and our REST API. We are fundamentally committed to protecting the proprietary nature of your enterprise deliberation and corporate decision memory.

Zero-Knowledge Principle: Unlike consumer AI chat interfaces, DecisionVault never uses customer decision payloads, contextual deliberative notes, or financial variables to train shared foundation models. All mathematical embedding operations occur in isolated AWS Nitro Enclaves with customer-managed cryptographic key controls (AWS KMS).

2. Information We Collect

We collect information strictly necessary to provide and operate the platform:

• Account & Administrative Data: Name, work email address, enterprise name, billing preferences, and authorization credentials when registering for the service.
• API Telemetry: Request timestamps, token usage metrics, response latency, and cryptographic hash verification proofs for system reliability and quota billing.
• Customer Decisional Metadata: When you submit decisions for evaluation via API or connectors, metadata is transformed into high-dimensional mathematical vector coordinates and cryptographically sealed under your tenant ID.

3. Data Security & AWS Cloud Infrastructure

All customer data processed by DecisionVault is encrypted in transit using TLS 1.3 with Perfect Forward Secrecy and at rest using AES-256-GCM encryption backed by AWS Key Management Service (AWS KMS).

Our infrastructure operates across multi-region Amazon Web Services availability zones adhering to SOC 2 Type II, ISO/IEC 27001, and HIPAA Security Rule certifications.

4. GDPR & International Data Rights

Under the EU General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), users possess the right to:

• Access, rectify, or request immediate permanent deletion of their account credentials and tenant vector nodes.
• Export all historical precedent audit logs in standard portable JSON format.
• Restrict automated processing of personal information.

5. Operating Structure & Contact Information

DecisionVault operates as a globally distributed, remote-first technology platform. For questions, data processing agreements (DPA), or data deletion requests, contact our security office directly: