Effective date: October 18, 2026.
The Reporting Command Center is self-hosted by the purchaser. Encrypted Syntax Labs does not operate the customer’s application database, evidence store, report workspace, identity provider, AI provider, email sender, or backups.
Data that remains with the customer
Organization identities, user accounts, project and client information, scope, findings, evidence, reports, comments, audit records, provider credentials, delivery keys, and generated documents remain in infrastructure controlled by the purchaser unless the purchaser deliberately sends limited material to a provider it configured.
Licensing information processed by Encrypted Syntax Labs and Keygen
Online entitlement validation sends only the Product and policy identifiers, a random installation-derived one-way fingerprint, and the supplied license credential to Keygen. It does not send organization names, user identities, client names, projects, findings, evidence, reports, email addresses, branding, AI prompts, or document content.
Commercial fulfillment records the WooCommerce order identifier, amount and currency, Keygen license identifier, a short one-way license-key fingerprint, and a one-way digest of the purchaser’s checkout email. The fulfillment service does not persist the plaintext license key or checkout email. WooCommerce, Stripe, and Keygen separately process information under their own terms and privacy notices.
Support information
Support may request the release ID, workflow stage, bounded error category, and the privacy-safe diagnostic report. Customers should not send credentials, private keys, unrestricted logs, database dumps, client identities, targets, evidence, or report contents unless a separately authorized support process expressly requires the minimum necessary disclosure.
Retention and rights
Order, tax, fraud-prevention, support, and licensing records are retained only for the applicable business, security, contractual, and legal periods. Requests concerning storefront account or order information should use the official privacy contact published by Encrypted Syntax Labs. Data inside a customer-operated installation must be handled by that customer as the relevant controller or business.