Institutional Privacy Notice
Last updated: February 2026 • Governing Law: Swiss Federal Act on Data Protection (FADP) & EU GDPR
1. Fundamental Sovereignty Invariant
Cogniloom is designed for regulated commercial and institutional environments. Customer documents, underwriting dossiers, and financial records submitted for parsing or policy evaluation are never retained, stored, or utilized for foundational model training.
2. Data Egress & Telemetry
In our sovereign VPC and air-gapped on-premises distribution models, zero outbound network telemetry is transmitted. All parsing occurs strictly within the customer's designated VPC or bare-metal environment.
3. Cryptographic Logging
Audit trails emitted by our human-in-the-loop review queues are encrypted at rest with client-controlled HSM keys. We do not maintain access to client private keys or decryption secrets.
4. Data Protection Officer (DPO)
For questions concerning our compliance with Swiss FADP, EU GDPR, or FINMA circulars, contact our Data Protection Officer at: privacy@cogniloom.com.