Sovereign Data Control Policy

This policy is a draft, not yet approved by independent legal counsel.

1. Tenant Sovereignty

Each tenant retains sovereign control over its data. The Service does not access, read, or use tenant data for any purpose other than providing the Service to that tenant.

2. No Cross-Tenant Learning

Data from one tenant is never used to train, fine-tune, or improve models for another tenant. Tenant data is logically isolated at the database, storage, and compute levels.

3. Key Management

Tenants may use their own encryption keys where supported. The Service provides envelope encryption for sensitive data stored in relational database and object storage.

4. Government Access

The Service requires due legal process for any government access request. Tenants are notified where legally permitted. The Service challenges overly broad requests.

5. Data Ownership

Tenants own their data. The Service claims no ownership interest in tenant data, AI outputs, or derived insights. Tenants retain all intellectual property rights.

6. Exit Rights

Tenants may exit the Service at any time. Data export and account deletion are available without restriction. No lock-in beyond active billing periods is imposed.