VERIDENCE

Node: Sovereign [Active]

Region: us-central1

PRIVACY POLICY

Data Privacy & Transparency Charter

Last Updated: September 30, 2026

1. Zero-Retention Execution & Sandbox Security

Veridence parses and audits target codebases inside ephemeral, RAM-only sandbox containers. Source code is never written to persistent disk storage, and sandbox environments are completely destroyed immediately post-execution.

2. Comprehensive Data Collection Inventory

To deliver technical due diligence analytics and integrate with corporate tools, Veridence collects and processes the following specific data categories:

• Slack Identifiers: Slack Workspace/Team ID (e.g. T07CLV...), Slack User ID (e.g. U07CM...), channel IDs, and bot installation metadata.

• Repository Metadata: Target GitHub repository URLs, commit SHA hashes, file counts, programming language distribution, and line-of-code metrics.

• OAuth & Credentials: Encrypted Slack Bot Tokens, OAuth 2.0 access credentials, and enterprise license activation keys.

• Technical Telemetry & Logs: IP addresses, API request timestamps, HTTP user-agent headers, and audit execution logs.

3. Purpose Statements & Data Retention Rationale

Every data category collected serves a specific operational purpose:

• OAuth & Session Tokens: Stored securely to authenticate API calls to Slack and GitHub on behalf of authorized workspace users.

• Audit Summaries & Reports: High-level compliance scores, EBITDA liability estimates, and PDF/CSV reports are retained for 30 days to enable customer audit retrieval, SLA verification, and historical risk tracking before automatic purging.

• Telemetry & IP Logs: Used exclusively for rate-limiting, security anomaly monitoring, and preventing unauthorized API abuse.

4. User Rights & Data Deletion Requests

Users and workspace administrators have the explicit right to request deletion of their personal data, workspace records, and audit telemetry at any time prior to the automatic 30-day purge window.

To submit a data deletion request, email contact@agiphi.com or privacy@agiphi.com with your workspace ID or license key. Deletion requests are acknowledged within 24 hours, and all associated workspace records are permanently expunged within 48 hours of confirmation.

5. Integration Data Flow Transparency

Data flows securely between authorized APIs: Slack API (OAuth consent, slash command payloads, and Block Kit notifications) and GitHub API (ephemeral read-only repository fetching). No customer data or code is ever shared with third-party advertisers or external LLM training pipelines.

6. Encryption & Storage Security Standards

All communication is encrypted in transit using TLS 1.3 / HTTPS and at rest using AES-256. Cloud database infrastructure is hosted in SOC-2 compliant Oracle Cloud Infrastructure (OCI) VPC environments.

7. Security Contact

For security inquiries or custom escrow arrangements, contact security@agiphi.com or privacy@agiphi.com.

© 2026 Agiphi Veridence. All rights reserved.

•

Built with Reflex