Confidentiality Policy

All non-public information received from customers, partners, or prospects in the course of the relationship: business data, architectures, requirements, documents, sample data, proposals, pricing, proof-of-concept results, and any information identified as confidential or that by its nature should be treated as such.

• Use confidential information only for the purpose for which it was shared.
• Restrict access to employees and contractors who need to know it, all bound by confidentiality obligations.
• Protect the information with technical and organizational measures comparable to those used for our own critical information, never below a reasonable market standard.
• Not disclose it to third parties without written authorization, except where required by law, in which case we will notify the owner when permitted.
• Return or delete the information when the purpose ends or upon request, except for copies required by law.

The Aptabit Platform runs on the customer's infrastructure. Documents, conversations, data contexts, and results processed there are not accessed by Aptabit, except with express authorization for support, and are never used to train models or for any other purpose.

Data provided for proofs of concept is used only in the agreed environment, for the duration of the proof, and deleted at the end, unless otherwise agreed in writing. We recommend anonymized or synthetic data whenever possible.

Information is not confidential if it is already public through no fault of Aptabit, was legitimately known to Aptabit before receipt, is independently developed, or is lawfully received from third parties without a duty of confidentiality.

This policy sets the minimum standard. Non-disclosure agreements (NDAs) and contracts signed with each customer or partner prevail over it where they are more specific or more protective.