What we collect. Why. How to delete it.

The MIT-licensed BNEXIA SOC distribution runs entirely inside your environment. There is no phone-home, no telemetry endpoint, no opt-in analytics SDK, and no anonymous usage report shipped from your cluster back to us. When `AISOC_AIRGAPPED=true` the platform refuses to make outbound calls of any kind — including to LLM providers — so an air-gapped deployment can demonstrate the no-egress property by inspecting its own network.

You configure your own LLM provider (OpenAI, Anthropic, Azure, Bedrock, or a private gateway). Their privacy policy governs the prompts you choose to send them — we are not a party to that traffic.

Like every static site, our hosting provider records standard HTTP access logs (IP, user-agent, requested path, referrer, timestamp). We retain these for up to 30 days for abuse mitigation and then discard them. We do not run third-party ad networks, do not embed cross-site trackers, and do not sell or share access logs.

When you sign the managed waitlist we collect the fields you submit (work email, name, company, optional notes) and store them for the explicit purpose of contacting you about onboarding. We do not enrich, resell, or share that data. To delete your waitlist record, email privacy@tryaisoc.com from the address you signed up with and we will remove it within 14 days.

The managed tier is on waitlist; once it ships, this section will spell out exactly what data we host on your behalf, the region you can pin it to, the encryption-at-rest configuration, the backup retention window, and the data-deletion SLA. Until then there is no managed customer data in our possession.

BNEXIA SOC is a B2B security product. We do not direct it at children under 16 and do not knowingly collect data from them.

Privacy questions and deletion requests: privacy@tryaisoc.com. Security disclosures: security@tryaisoc.com (see SECURITY.md for PGP keys and the disclosure window). General contact: hello@tryaisoc.com.