Privacy Policy

Where your data is

This deployment runs on infrastructure your organisation controls. Exhibits, examinations, reports, accounts and audit records are stored in your own database and on your own storage volume. Exiphore holds no copy and has no access to a deployed instance unless your administrator grants it for support.

What leaves the deployment

Nothing in the examination path makes an external call. The only component that can reach outside is optional narrative generation, which turns completed measurements into plain language. It never sees a finding before it is fixed, never alters one, and is disabled by leaving its key unset — the default on an air-gapped installation.

There is no telemetry, analytics or usage reporting back to Exiphore.

What is recorded about you

• Your account details, as entered by you or your administrator.
• Sign-in times, the address you signed in from, and failed attempts.
• Every action you take in the platform, including reads, in the audit log.
• Your profile photo, if you upload one, on the same volume as everything else.

The audit log is hash-chained and append-only. It exists so that an examination can be defended later, which means entries about your own activity cannot be edited or removed — including by you.

Material you submit

Exhibits frequently contain personal data, often about people who did not submit them. They are sealed read-only on intake and never modified. Retention and classification are set by your organisation, and lawful basis for processing the material rests with your organisation rather than with Exiphore.