New ReleaseIntroducing EnterpriseACP — The Enterprise Agent Control Plane.See the platform →
EnterpriseACP
Data Protection & Privacy Standard

Privacy Policy

Effective Date: July 22, 2026 | Version 2.4 | Enterprise Security Governance

Core Privacy Guarantees

  • No Model Training: We never use prompt contents, tool parameters, or agent records for model training.
  • Customer Key Isolation: All data is encrypted with customer-controlled keys (BYOK).
  • Zero Data Selling: We never monetize, sell, or share telemetry data with third parties.
  • Configurable Retention: Customers set custom audit log retention schedules (1 day to 7 years).

1. Information We Collect

EnterpriseACP collects only the minimal operational telemetry required to evaluate runtime leases, execute sidecar tool interception, maintain agent passports, and generate immutable audit logs for your security organization.

  • Agent Identity Metadata: Agent UUIDs, sponsor human IDs, risk levels, and version manifests.
  • Tool Execution Telemetry: MCP server destination endpoints, request duration, status codes, and authority token signatures.
  • System Administrative Logs: Console user access records, security role changes, and API key minting events.

2. How Information Is Used

Information collected is strictly utilized to enforce least-privilege authority policies, detect unauthorized tool execution attempts, trigger automated agent isolation rules, and render compliance reporting dashboard metrics.

3. Data Residency & Encryption Standards

Customer data resides strictly within designated geographic tenancies (US, EU, APAC, or dedicated GovCloud environments). All data at rest is encrypted with AES-256-GCM. Data in transit utilizes TLS 1.3 with mutually authenticated TLS (mTLS) enforced across sidecar components.

4. Your Rights & Data Subject Requests

Under GDPR, CCPA, and global privacy frameworks, administrators can request full export of Agent Decision Records or trigger automated purging routines for historical agent logs.

5. Contact Privacy Office

For privacy inquiries or Data Protection Officer (DPO) communications, contact us directly at privacy@enterpriseacp.com.