Privacy & Legal

Clear boundaries around data, evidence and public claims.

TenantSage is presented as a governance architecture and implementation program. Public materials are designed to explain enforceable boundaries without disclosing customer data, credentials, privileged topology or proprietary control mechanisms.

Privacy statement

Public TenantSage materials do not expose customer identifiers or customer evidence.
Durable governance receipts are designed to rely on hashes and evidence lineage rather than publishing raw customer content.
Customer evidence access must remain bound to explicit authority and governance decisions.
Proprietary policy logic, privileged topology, internal SQL and credentials are not part of the public website surface.

Discrimination risk

Evidence eligibility is not a fairness finding.

Authority and evidence controls address who may retrieve material for a request. They do not determine whether source data, policies, model behavior or downstream decisions produce discriminatory outcomes.

Any consequential deployment needs use-case-specific testing, human review, and a way for affected people to challenge decisions. No anti-discrimination compliance or fairness certification is claimed by this website.

Legal positioning

Architecture, not certification.

TenantSage does not claim that an architecture diagram, specification or isolated test result constitutes regulatory certification, guaranteed security or universal compliance. Any implementation claim must remain tied to the specific build, configuration and evidence supporting it.

Terms of use — public materials

No warranty of security is created by this website.

No regulatory compliance is claimed solely by use of TenantSage concepts or software.

Technical descriptions may evolve as the implementation and conformance program evolve.

Professional legal, security and compliance assessment remains separate from architectural documentation.

Regulatory alignment

EU AI Act — record-keeping and transparency concepts may be relevant, subject to separate legal assessment.
NIST SP 800-207 — zero-trust principles provide useful comparison points, not certification.
OWASP LLM risk guidance — retrieval, authorization and data-exposure risks inform the threat model.
SOC 2 and GDPR — any compliance conclusion requires separate scope, implementation evidence and professional assessment.

Evidence disclosure policy

Publish architectural invariants and threat models.
Publish conformance methodology and synthetic examples.
Publish redacted or commit-bound test outcomes where appropriate.
Do not publish internal resolver code, privileged database mechanisms, credentials or customer topology.

Legal review

Questions about scope or claims?

Contact the TenantSage legal review channel for discussion of public statements, evidence boundaries or proposed enterprise review.

legal@tenantsage.org