Privacy Policy

1. Scope

This policy covers personal data that Integrators AI LLC (“we”) processes through the integrity-stack.com website, the Sentinel hosted console, and our sales and support communications.

2. What we do not receive

This is the part most relevant to a regulated buyer, so it goes first.

Sentinel is designed to be self-hosted. In a self-hosted deployment, the decision requests your agents send — loan parameters, applicant attributes, model outputs, the audit chain and evidence bundles — are processed inside your own infrastructure and are never transmitted to us. We do not receive them, store them, or have any means of retrieving them.

If you use a hosted or trial environment we operate, that separation does not apply, and the data you send is processed by us as a processor on your behalf under the terms of your agreement.

3. What we collect

Account and contact data — name, work email, company, role, and anything you choose to tell us, when you request a demo, correspond with us, or are provisioned into a console.
Authentication data — API key identifiers and hashes. API keys are stored as SHA-256 hashes; we cannot recover the original value.
Usage and diagnostic data for environments we operate — request timestamps, endpoints, error traces, and performance metrics.
Website data — standard server logs including IP address, user agent and referring page.

4. Why we process it

To provide, secure and support the service.
To respond to enquiries and administer evaluations and pilots.
To meet legal, accounting and security obligations.

Where the GDPR applies, our legal bases are performance of a contract, our legitimate interests in operating and securing the service, and consent where we rely on it. TBD — confirm with counsel

5. Sharing

We do not sell personal data and we do not share it for advertising. We share it with service providers who process it on our behalf under contract, and where required by law or to protect rights and safety.

Current subprocessors: TBD — publish the list (hosting, database, email, analytics) and a change-notification commitment

6. Retention

We retain account and contact data for as long as the relationship continues and afterwards as needed for legal and accounting purposes. Operational logs for environments we run are retained for TBD.

Note that audit records inside a Sentinel deployment are append-only by design and are governed by your retention policy, not ours.

7. Security

We use access controls, encryption in transit, hashed credentials and role-based authorisation. No system is perfectly secure, and we do not claim otherwise. Our current certification status is stated plainly rather than implied: TBD — see the compliance status page once published.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, port or restrict processing of your personal data, to object to processing, and to complain to a supervisory authority. Email contact@integrity-stack.com and we will respond within the period required by applicable law.

If we process data as a processor on your behalf, please direct requests to the controller — usually your institution — and we will assist them.

9. International transfers

We are established in the United States. Where we receive personal data from the EEA or UK, transfers rely on TBD — SCCs or other mechanism, confirm with counsel.

10. Cookies

The marketing site uses only what is necessary to serve the pages. We do not currently run advertising or cross-site tracking cookies. TBD — re-confirm if analytics are added

11. Children

The service is for business use and is not directed to anyone under 16. We do not knowingly collect their data.

12. Changes

We will update the date at the top of this page when this policy changes, and will give notice of material changes to customers under contract.

13. Contact

Integrators AI LLC — contact@integrity-stack.com. Registered address and any required EU/UK representative: TBD.