Legal — Privacy, Terms & Security

Last updated: June 2026

Overview

This Privacy Policy describes how Operanix collects, uses, and protects information when you use our platform and website. We are committed to data minimization, tenant isolation, and giving customers control over their data.

Information we collect

Account information you provide (name, work email, company).
Usage and operational telemetry needed to run and secure the service.
Content you submit to the platform — knowledge sources, tasks, and agent configurations.

How we use it

To provide, secure and improve the service, to communicate with you, and to meet legal and compliance obligations. We do not sell personal information.

Data handling & retention

Customer data is stored in a tenant-isolated environment with scoped access. Enterprise customers may run Operanix in their own private cloud or on-premises so data never leaves their perimeter. PII is detected and redacted before persistence where applicable.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, export or delete your personal data. Contact us to exercise these rights.

This page is a template summary and not legal advice. Final policy language should be reviewed by counsel before launch.

Last updated: June 2026

Agreement

By accessing or using Operanix, you agree to these Terms of Service. If you are using the service on behalf of an organization, you agree on its behalf.

Use of the service

You are responsible for the actions your AI agents take within the permissions you grant them.
Human approval is required for actions you designate as high-risk; you remain accountable for approved actions.
You agree not to misuse the platform or attempt to bypass its governance controls.

Plans & billing

Paid plans are billed per the pricing in effect at purchase. Trials convert to paid plans unless cancelled before the trial ends. You may cancel at any time.

Availability

Enterprise plans include a contractual uptime SLA. We maintain a public status page and notify customers of material incidents.

This page is a template summary and not legal advice. Final terms should be reviewed by counsel before launch.

Last updated: June 2026

Security commitments

Security is enforced at every layer of Operanix. A summary of our controls:

Tenant-isolated data store with scoped queries — no cross-tenant access.
SSRF protection blocking internal IPs, metadata servers and private networks.
Compliance gate on every knowledge entity and document chunk before storage.
8-level role-based access control.
Immutable, append-only audit trail.
Rate limiting across the entire API surface and bearer-token authentication.
PII detection and automatic redaction.

Operanix runs on a SOC 2-compliant architecture; formal SOC 2 Type II certification is on our roadmap. For a detailed controls overview, DPA, or a security review under NDA, contact our team.

See the full Security & Compliance page for architecture detail.