Enterprise Privacy & Data Protection Charter

Your data is your defense.
We keep it mathematically sovereign.

Forge Intelligence Systems is built for high-stakes capital projects. We maintain strict zero-trust standards, national residency isolation, and zero public AI model training.

Zero Public Training

Your schedules, daily logs, and financial rates are never used to train public or foundational AI models.

National Sovereignty

Dedicated database pinning across Frankfurt (BDSG), London (UK DPA), Virginia, or Dubai with hard egress locks.

Customer-Managed Keys

Enforce your own AWS KMS Key ARN with FIPS 140-2 HSMs. Key revocation triggers immediate cryptographic shredding.

1. Enterprise Data Ownership & Zero Public Model Training

You retain sole and exclusive ownership of all project schedules (Primavera P6 .XER/.XML), unstructured site records (daily reports, meeting minutes, inspection logs), and contractual documents uploaded to Forge Intelligence Systems. Forge processes your data strictly within your isolated enterprise tenant. Under no circumstances is customer data used to train, retrain, fine-tune, or calibrate public or foundational large language models.

2. Geographic Residency & Cross-Border Egress Restrictions

Forge provides native multi-region National Data Sovereignty Pinning. When creating a project environment, customers specify the sovereign jurisdiction for all relational data, vector embeddings, and ingested documents:

  • • Europe (Frankfurt, Germany): EU GDPR Article 44–50, German BDSG, ISO 27001, C5 (BSI).
  • • Europe (Dublin, Ireland): EU GDPR, Irish Data Protection Act 2018.
  • • United Kingdom (London): UK GDPR, Data Protection Act 2018, Cyber Essentials Plus.
  • • United States (N. Virginia): NIST SP 800-53, FedRAMP Moderate Equivalent, SOC 2 Type II.
  • • Middle East (Dubai, UAE): UAE Federal Decree-Law No. 45/2021 on Personal Data Protection.

Our infrastructure enforces strict firewall egress rules blocking unauthorized cross-border replication or transfer.

3. Customer-Managed Encryption Keys (CMEK)

For high-security defense and infrastructure programs, Forge supports Customer-Managed Encryption Keys (CMEK) backed by AWS KMS, GCP Cloud KMS, or Azure Key Vault. Data at rest is encrypted using AES-256 envelope encryption. If a customer disables or rotates their KMS key, all underlying data becomes cryptographically unreadable, ensuring irreversible cryptographic shredding upon contract termination.

4. Tamper-Evident Merkle Audit Trails

To support SOC 2 Type II compliance and legal dispute admissibility under the SCL Delay Protocol, every schedule recalculation, evidence triage decision, and dispute bundle generation is cryptographically sealed into a sequential SHA-256 hash chain anchored to an immutable project genesis block. Tampering or database manipulation breaks the hash chain, providing verifiable mathematical proof of evidentiary integrity.

5. Multi-Tier Clean-Room RBAC & Field-Level Redaction

Forge enforces an 8-tier Clean-Room Role-Based Access Control system. When collaborating with external project stakeholders (such as Subcontractors or Owners), the platform automatically redacts internal labor cost rates, prolongation multipliers, and privileged legal counsel strategy notes at the database and API serialization boundary.

6. Data Subject Rights & DPO Contact

In compliance with GDPR and global privacy statutes, authorized users retain the right to request data access, rectification, portability, or deletion of personal identifiers. For inquiries or data protection officer (DPO) coordination, contact our security council at:

Email: privacy@forge-cc.io
Attention: Data Protection Officer (DPO), Forge Intelligence Systems