At Tessera AI, Inc., we take the privacy and security of your enterprise data extremely seriously. This policy describes how we collect, use, and handle your information.

1. Data Ownership

You retain full ownership of all workflows, prompts, and synthetic data generated within your private tenant. Tessera OS acts strictly as a data processor. We do not use your proprietary workflows to train our base orchestration models.

2. Security & Encryption

All API keys and external tool credentials stored in the platform are encrypted at rest using AES-256 and Fernet symmetric encryption. Data in transit is protected via TLS 1.3.

3. Compliance (SOC2)

Tessera AI is currently undergoing SOC2 Type II compliance audits. If you require a copy of our attestation report, please email security@tesseraos.ai.