Your revenue data is the most sensitive thing you own.
The platform reads from your CRM, your mailboxes, your support desk and your billing system. That access is only defensible if the controls around it are. Here is exactly what those are — the same document we hand your security team.
TLS 1.2+ for every connection, AES-256 at rest. Credentials and OAuth tokens are held in a dedicated secret store, never in application tables.
Tenant identity is enforced in the data layer, not by application filtering. A query that omits a tenant boundary fails rather than returning someone else's rows.
Customer data is excluded from model training by contract and architecture. Improvement comes from a tenant's own revenue memory, which stays inside that tenant.
Source systems connect read-only via OAuth. We never ask for a password to a CRM, mailbox or billing system, and write scopes are granted per action type.
Visibility follows the org chart. Roles are enforced server-side on every request, and elevation is logged like any other action.
Every AI decision, recommendation, approval and execution is recorded with its inputs, its evidence and the person who approved it. Exportable for review.
Actions are designed to be replayed safely and undone. Sync engines retry until reconciled rather than failing silently and leaving a partial state.
No single model vendor is a single point of failure. Requests fail over automatically, and confidence thresholds hold regardless of which provider served them.
Designed to SOC 2 controls with GDPR and DPDP-aware handling: deletion, access logging and consent are built into the data layer rather than bolted on.
Dedicated environments, VPC or on-premise deployment, SSO/SAML and data-residency options where the regulator requires them.
Who else touches the data.
The current list. Customers on a dedicated environment receive notice before this changes.
| Subprocessor | Purpose | Region |
|---|---|---|
| Cloud infrastructure | Application hosting, managed databases and object storage | Configurable region |
| Model providers | Inference for analysis and drafting, under zero-retention terms | Configurable region |
| Observability | Application logs, error tracking and uptime monitoring | Configurable region |
| Transactional email | System notifications and approval requests | Configurable region |
Data-flow diagrams, control mapping and deployment options are available under NDA · admin@intelegit.com
We would rather answer the hard questions before a pilot than after one.