Privacy Policy
Last Updated: October 14, 2026 • Version 4.1
1. Our Commitment to Zero Telemetry Retention
CipherMind is built on the principle of data minimization. When our autonomous eBPF sensors inspect memory allocations, network headers, and syscall traces, payloads are stripped of sensitive customer content and hashed before behavioral scoring occurs.
2. Data We Process
We process account contact details, organizational cloud metadata (e.g., VPC network identifiers, Kubernetes namespace topology), and aggregated security event metadata strictly to facilitate threat containment and platform access.
3. Encryption & Storage
All data in transit is encrypted using TLS 1.3 with forward secrecy. Data at rest is encrypted via AES-256-GCM using dedicated customer-managed KMS keys where configured.
4. Compliance with GDPR & CCPA
Organizations exercising data subject access requests (DSAR) or data deletion orders may do so directly via our security privacy officer at privacy@ciphermind.security.