Strategic work is confidential by definition — client names, financials, board discussions, deal terms. This page says, in plain English, exactly what data Aavartam touches, where it goes, who can see it, and when it's deleted. No jargon, nothing buried in legal text.
We'd rather you read this before your CFO or counsel has to ask. The same commitments are available as a signed one-pager and Data Processing Agreement for your records.
Documents you upload (proposals, transcripts, research, financial packs), project details you enter, and meeting notes you capture. We do not store passwords to your other systems or personal identification documents.
Your data lives in a managed cloud database, encrypted at rest and in transit. AI processing runs through enterprise APIs from named providers — primarily Anthropic — under terms that prohibit using your data to train their models. No anonymous "AI providers."
The people on your engagement — and no one else. Your data is never shared with other customers, AI vendor employees cannot read it under their enterprise terms, and our own operational access is restricted and logged.
AI requests are processed and not retained for training by our providers. Your project data is retained while your account is active, and deleted on request at any time — with written confirmation within 72 hours.
A Data Processing Agreement signed with each client on request. Our AI providers operate under enterprise terms with no-training guarantees and are independently certified (SOC 2 Type II). A mutual NDA template is ready before any data is shared.
One request, by email or through your account contact. We confirm deletion of the engagement's data — documents, knowledge base, outputs — in writing within 72 hours.
The guarantees above hold because of how the platform is built — not because of a paragraph in our terms.
All AI calls run on enterprise-tier APIs whose terms prohibit training on customer data. We name our providers, and the no-training commitment flows down contractually — we don't train on your data, and neither can they.
AI requests route through a secure server-side proxy that injects credentials on the server. No API keys in your browser, no keys in page source, nothing for an attacker to lift from the client.
Each engagement's documents, knowledge base and outputs are tied to that engagement. Deleting an engagement removes its associated data — context never bleeds between clients or sessions.
We track what data goes to which provider and when. When a client's legal team asks "show us where our data went," the answer is a structured report — not an anxious conversation.
For corporate strategy offices, financial-services clients and regulated environments, Aavartam can be deployed in a dedicated private cloud — your own isolated environment, with nothing shared across tenants.
Private cloud is a deployment tier, not an add-on checkbox — scoped, priced and security-reviewed per client.
Private deployments are validated with independent vulnerability assessment and penetration testing before go-live.
Standard deployment runbook covering environment setup, data migration and client legal review.