Confidentiality commitments

All scenario descriptions, uploaded documents, evidence items, participant identities, transcripts, reports and commercial terms disclosed by a customer are treated as confidential information, whether or not marked as such.

Confidential information is used only to operate the service for that customer and to meet support and legal obligations. It is not sold, licensed, or used to market to third parties, and it is not used to produce output for another customer.

Access is limited to personnel and subprocessors with a defined operational need, each bound by confidentiality obligations at least as protective as these commitments. Support access to customer content is on a least-privilege basis and, where practicable, on request.

Records are scoped to their owner in the application: private evidence and runs are visible to their owner and to administrators of the customer's workspace. Material only becomes shared or published when a user deliberately shares it.

These commitments do not apply to information that is public through no fault of ours, already lawfully held, independently developed, or required to be disclosed by law. Where disclosure is legally compelled, we give notice unless prohibited.

On request or at the end of the relationship, confidential material is exported to the customer and then deleted from active systems, with backups aging out on the standard rotation.