Privacy Policy

1. Who we are

Blue Sentinel AI, Inc. ("Blue Sentinel AI", "we", "us") is a Delaware corporation with its registered address at 2810 N Church St #131596, Wilmington, DE 19802-4447. We provide AegisCore AI™, an enterprise AI security and AI governance platform, together with related consulting, laboratory, and advisory services.

2. Information we collect

2.1 Information you provide

• Contact and inquiry data — name, business email, company, and the content of your message when you request a demo, scope a pilot, request documentation, or contact us.
• Assessment inputs — responses you provide to the AI Security & Governance Readiness Assessment.
• White paper requests — the name, work email, organisation and role you enter to obtain a white paper, together with the title of the paper requested. We ask for your explicit consent on that form before you submit it, and you may withdraw it at any time using the contact details in section 13. The download itself is not conditional on the email reaching us — your browser begins the download when you submit, so a delivery failure never costs you the document.
• Recruitment data — information you submit when applying for a role.

2.2 Information collected automatically

• Website usage — pages viewed, referring source, approximate region, and device type, collected via privacy-preserving analytics that do not use tracking cookies or build cross-site profiles.
• Technical logs — IP address and request metadata retained briefly for security, abuse prevention, and diagnostics.

2.3 Customer platform data

Where we process telemetry, configuration, and posture data on behalf of an enterprise customer, we act as a processor and the customer is the controller. That processing is governed by the customer's Data Processing Addendum, not by this policy. Customer data is not used to train shared or third-party models.

3. How we use information

• To respond to inquiries, scope pilots, and deliver requested documentation
• To follow up on a white paper request, where you have given consent on that form
• To provide, secure, maintain, and improve the platform and services
• To meet legal, regulatory, contractual, and security obligations
• To detect, investigate, and prevent security incidents, fraud, and abuse

We do not use personal information for automated decision-making producing legal or similarly significant effects.

4. Legal bases (EEA / UK)

• Legitimate interests — responding to business inquiries, securing our services, improving our offering
• Contract — performing an agreement with you or your organization
• Legal obligation — meeting statutory and regulatory requirements
• Consent — where required, and withdrawable at any time

5. Sharing and disclosure

We share personal information only with: (a) service providers acting under written instruction and confidentiality obligations; (b) professional advisors; (c) authorities where legally required; and (d) an acquirer in connection with a corporate transaction, subject to this policy. We do not sell personal information. Our current subprocessors are available on request.

6. International transfers

Where personal information is transferred outside its country of origin, we rely on appropriate safeguards including Standard Contractual Clauses. Private Cloud, On-Premises, and Air-Gapped deployments allow data to remain entirely within a customer-selected region or facility.

7. Retention

Inquiry data is retained only as long as necessary for the purpose collected and for a reasonable period thereafter for legal and audit purposes. Technical logs are retained on a short rolling window. Customer platform data retention is configured by the customer.

8. Security

We apply encryption in transit and at rest, role-based access control with segregation of duties, tenant isolation, continuous monitoring, and adversarial self-testing of our own platform. Further detail is published in our Trust Center.

9. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, port, or object to processing of your personal information, and to lodge a complaint with a supervisory authority. To exercise any right, contact AISecure@bluesentinelai.ai. We respond within the period required by applicable law.

10. Cookies

We use only strictly necessary cookies required for the site to function. We do not use advertising or cross-site tracking cookies.

11. Children

Our services are intended solely for enterprise use and are not directed to individuals under 18.

12. Changes

Material changes will be reflected by an updated effective date and, where appropriate, direct notice to affected customers.

13. Contact

Blue Sentinel AI, Inc.
2810 N Church St #131596
Wilmington, DE 19802-4447
AISecure@bluesentinelai.ai