Legal
Ledgix is a B2B platform. We do not sell or rent customer data to third parties, we do not run third-party advertising, and we do not run any behavioral analytics on the personal data you or your users submit through the platform.
Ledgix Inc. (“Ledgix”, “we”, “us”) operates the Ledgix ALCV platform — an authorization and audit layer for AI agent actions. Our registered address and primary point of contact for privacy matters is contact@ledgix.dev.
This policy applies to the Ledgix platform (Vault API, customer dashboard at app.ledgix.dev, developer documentation at docs.ledgix.dev), and our published SDKs (ledgix-ts and ledgix-python). It does not apply to third-party services your organization connects to Ledgix.
When you create an account or accept an invitation, we collect your email address, your organization name, and the authentication credentials required to log in (managed through our auth provider, Supabase). If your organization configures SSO, your identity provider shares the claims required to authenticate you.
The core function of Ledgix is to authorize and record agent actions. Each clearance request your application submits is recorded in your tenant's append-only audit ledger and includes:
Important: The tool_args field may contain personal data belonging to your end-users depending on how your application is built. You are responsible for ensuring that data sent to Ledgix through tool_args is limited to what is necessary for the authorization decision and complies with your own privacy obligations.
Documents, structured rules, or text you upload to define how your agents should behave. This content is stored in your tenant's isolated database and used by our policy evaluation engine to process clearance requests.
Email addresses you provide as review notification recipients, Slack webhook URLs you configure, and compliance report delivery preferences. These are stored per tenant and used only to deliver the notifications and reports you configure.
Standard server logs including IP addresses, request timestamps, HTTP methods and paths, response codes, and latencies. These are retained for operational purposes and not used for behavioral profiling.
We do not run third-party behavioral analytics, advertising pixels, or session recording on any Ledgix property. We do not collect credit card numbers directly — billing is handled by our payment processor (Stripe) under their own privacy policy.
We use the data described above to:
We do not use the content of clearance requests, policy documents, or ledger entries to train AI models without your explicit consent.
We share data with sub-processors that help us deliver the platform, including:
Each sub-processor is bound by data processing agreements consistent with applicable law.
We may disclose data when required by law, regulation, court order, or governmental authority, or when we believe disclosure is necessary to protect the rights, property, or safety of Ledgix, our customers, or others.
If Ledgix is acquired, merged, or transfers substantially all its assets, customer data may be transferred as part of that transaction. We will provide notice before your data becomes subject to a materially different privacy policy.
We do not sell or rent personal data to third parties. We do not share ledger content or policy documents with other Ledgix customers. Tenant data is logically and cryptographically isolated.
The audit ledger is intentionally designed to be append-only and tamper-evident. Once a clearance decision is recorded and anchored, it cannot be selectively deleted without breaking the cryptographic chain — this is a core feature for SOX 404 and other regulatory frameworks that require immutable audit trails.
By default, ledger entries are retained for the lifetime of your tenant. Enterprise customers may negotiate specific retention terms in their order form, including legal hold procedures.
Account data (email addresses, organization settings, notification preferences) is deleted within 30 days of a verified account deletion request. Policy content is deleted when you remove it or upon tenant deletion.
We apply the following technical controls:
No security system is impenetrable. If you discover a vulnerability, please contact us at contact@ledgix.dev.
Ledgix infrastructure runs primarily in AWS regions in the United States. If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with data transfer restrictions, data may be transferred to the US. We rely on Standard Contractual Clauses (SCCs) as the legal mechanism for such transfers. Enterprise customers with data residency requirements should contact us to discuss region-specific deployment options.
Depending on your location, you may have the right to:
To exercise any of these rights, email contact@ledgix.dev. We will respond within 30 days. Note that some rights may be limited where the data forms part of a legally required audit record.
CCPA (California): California residents have the right to know what personal information is collected, to delete personal information, to opt out of sale (we do not sell personal information), and to non-discrimination for exercising these rights.
The Ledgix dashboard uses a minimal number of first-party cookies for session management and authentication state. We do not use third-party advertising cookies, behavioral tracking pixels, or fingerprinting scripts on any Ledgix property.
Ledgix is a B2B platform intended for use by organizations and their authorized personnel. We do not knowingly collect personal data from individuals under 18 years of age.
We may update this policy from time to time. If we make material changes, we will notify tenant administrators by email at least 14 days before the change takes effect. Continued use of the platform after that date constitutes acceptance of the updated policy.
For privacy questions, requests, or concerns:
See also our Terms of Service.