Privacy & Data Protection Policy

1. Core Enterprise Privacy Commitment

At FiyonLab (“we”, “our”, or “the Platform”), we recognize that enterprise financial records, general ledger postings, payroll rolls, and supply chain invoices constitute our customers' most sensitive business secrets. We treat your data with the highest cryptographic and physical isolation standards available in modern cloud engineering.

2. Schema-Per-Tenant Architectural Isolation

Unlike traditional multi-tenant SaaS architectures that co-mingle customer rows inside shared database tables filtered solely by a vulnerable tenant_id column, FiyonLab isolates each customer's data inside a dedicated PostgreSQL schema (tenant_<uuid>). This ensures that cross-tenant queries cannot occur even in the event of an application-layer logical fault.

3. Zero Model Training on Enterprise Financial Data

We maintain strict contractual and technical boundaries with our artificial intelligence model providers. Your financial data, bank statements, ledger entries, and communications are NEVER used to train, fine-tune, or improve public or foundation large language models (including models provided by Anthropic, OpenAI, or Google Cloud Vertex AI). All prompt inferences operate under strict zero-data-retention enterprise agreements.

4. Data Residency & Encryption Standards

All production databases, message queues, and application servers are hosted in Google Cloud Platform region asia-south1 (Mumbai, India).

• Encryption in Transit: Enforced TLS 1.3 across all public and internal service-to-service endpoints with strict HSTS preloading.
• Database Authentication: SCRAM-SHA-256 cryptographic handshakes with zero unencrypted credentials stored in source control or committed archives.
• Encryption at Rest: Cloud-managed AES-256 keys covering all database volumes, persistent disks, and backup snapshots.

5. Information We Collect via the Corporate Website

When you visit fiyonlab.com or submit a demo request, we collect only the business contact details you explicitly supply (such as full name, work email address, company name, and evaluation requirements). We never sell, rent, or lease your corporate contact information to third-party data brokers.

6. Security Inquiries & Contact

For compliance audits, data processing agreements (DPA), or vulnerability disclosures, contact our security office directly at security@fiyonlab.com.