Trust & security

We process personal data under lawful bases documented in our Privacy Policy, respond to data-subject requests (access, deletion, correction), and sign Standard Contractual Clauses for EU/UK transfers.

We sign DPAs with customers who need one. Our template covers processor obligations, SCC Module 2, technical and organizational measures, and sub-processor flow-down.

Every third-party service we use to deliver Archon is listed publicly with purpose, data categories, and region. We commit to 30 days’ notice before adding new ones.

Any signed-in user can export a complete JSON archive of their account and its associated records, or schedule account deletion with a 7-day grace window. No support ticket required.

Multi-tenant data is separated at three layers: Postgres row-level security on every org-scoped table, application-level membership checks on every mutation, and per-organization scoping in the vector store.

All credentials are stored in environment variables, never in code or the frontend. We rotate AI-provider keys quarterly, service-role keys annually (or immediately on suspicion), and log every rotation.

Sensitive mutations — member invites, role changes, SOP exports, account deletions — are logged with actor, IP, and user-agent. Organization admins can review their trail.

We maintain a breach-response runbook with a 72-hour GDPR notification clock and a customer-communication template. Report suspected issues to security@regnor.systems.