Technical Trust Asset

Data Handling Policy

How Centcept handles, stores, and protects your data.

Your data is yours

Client data is used only to deliver the engagement. We do not train models on client data, and we do not share it with third parties.

Data is encrypted in transit (TLS) and at rest. Keys are managed per engagement with rotation policies.

Access is limited to the team members who need it. Data retention follows your policy, and we delete or return data on request.

Where third-party services are used (e.g. cloud providers), we list them in the engagement terms and keep the list current.

Can you sign a DPA?

Yes — data processing agreements are available as part of the engagement contract.

Where is our data stored?

Deployment is your choice: cloud regions you specify, VPC, or on-premise.