Official authorization
Use supported platform authorization and access granted by authorized users.
Smart BIAIData and security
Public security facts with controlled access to sensitive detail
We publish authorization, data purpose, least privilege, retention and deletion, role and audit, and deployment boundaries. Detailed data flows, topology, and procurement materials are provided under controlled access.
Publish the baseline; control access to sensitive detail
Smart BIAI publicly explains authorization, data purpose, least privilege, user controls, operating records, and deployment boundaries. Exact storage location, regional processing, retention periods, sub-processors, topology, and customer-specific configuration are confirmed for the applicable product and delivery plan.
PUBLIC CONTROLS
Four controls that shape the product boundary
Least privilege
Limit people and systems to the accounts, functions, and asset data required for their role.
Enterprise data control
Customer materials and business data are not used for public model training without explicit authorization.
Traceable operations
Retain relevant authorization, task, publishing, permission-change, and administrative records.
DATA LIFECYCLE
Different data types require different handling
The public overview does not replace a customer-specific data-flow and retention review.
Authorization tokens
Used to connect supported services within granted permission. Revocation, expiry, and cleanup follow the connected platform and product controls.
Media and content assets
Used for creation, processing, distribution, and reuse within the customer's authorized workspace and delivery scope.
Business and operating data
Used for requested product workflows, analysis, task preparation, reporting, and authorized support.
Logs and backups
Used for security, audit, troubleshooting, continuity, and recovery. Retention and deletion differ from live business records and are confirmed separately.
CONTROLLED MATERIALS
Request detail appropriate to your procurement stage
Detailed data flows, deployment topology, security questionnaires, supplier information, and customer-specific configuration are provided after request review and may require confidentiality controls.
There are currently no public information-security certifications. Software copyright registration is not a security certification.