Privacy Policy
Transparent data practices, engineered for enterprise trust
Effective date: April 25, 2026. This policy describes how EVADA processes data to power secure operations, maintain service integrity, and support compliant cyber risk programmes.
Privacy commitments
- No sale of personal data
- Controlled subprocessor governance
- Encryption and auditability by default
Information we process
- Account identity and authentication metadata required for secure access.
- Security telemetry and scan outputs generated through authorised platform use.
- Operational diagnostics used to maintain reliability, threat visibility, and response quality.
Why we process it
- Deliver continuous security monitoring, exploit validation, and report generation.
- Improve model-assisted detection quality and prioritise high-confidence risks.
- Meet contractual, legal, and regulatory obligations for enterprise customers.
Sharing and subprocessors
- We do not sell personal information.
- Data may be processed by approved infrastructure/security subprocessors under strict DPA terms.
- All subprocessors are subject to confidentiality, access control, and security review requirements.
Retention and security
- Encryption in transit and at rest for sensitive data channels.
- Role-based access controls, auditing, and environment hardening.
- Retention periods are aligned with customer agreements and legal obligations.
Privacy contact
For data rights, processing requests or privacy review enquiries, contact info@evada.ai.