Trust

RegVision must honour, on its own data, every obligation it checks others against.

The boundary

Data never leaves your perimeter. Here's exactly what crosses it, and nothing more.

Your infrastructure
Your code, schemas, evidence, and customer data. Production runs here. Nothing about how RegVision reasons internally is exposed to you or needs to be - only the boundary matters.
Metadata for report generation only
RegVision
Deployed on your infrastructure. Receives only anonymised usage metrics for report generation - never your content.

Deployment & data handling

Deployed on your infrastructure
Production runs on your infrastructure. Your code, schemas, and evidence never leave it.
Never used to train
Customer code, schemas, policies and uploads are never used to train or fine-tune any model.
Retention-limited by design
Evidence is workspace-scoped and held only as long as its purpose requires, then purged. Only anonymised usage metrics reach our servers - never your content.
Untrusted-input handling
Customer-supplied content is normalised for prompt-injection before evaluation; suspected injections are flagged, not acted on.
ISO 27001 - in progress
Certification of our security standards is underway. We will share status openly through your vendor assessment.

Decision-support disclaimer

No warranty that use results in regulatory compliance. Your DPO retains all authority over compliance decisions.

[TBD - legal review. LIABILITY_AND_LEGAL_LANGUAGE.md does not yet exist in this repo; the text below is copied from terms.html ยง07 Liability as an interim source and needs the same legal review that section is already flagged for.]

To the maximum extent permitted by law, RegVision's aggregate liability is limited to fees paid in the twelve months preceding the claim. We are not liable for indirect or consequential damages. Subject to legal review before enterprise contracts.

Security review

For a direct security-review conversation - vendor assessment, architecture review, or a specific control question - book time with us.

Book a 20-minute walkthrough