How we handle your data.
Plain language. The formal DPA and Privacy Policy come with your contract; this page is current practice, stated plainly.
What we collect
opsnite collects only the data you bring into the platform plus the operational telemetry needed to run it. That includes account metadata (name, work email, role), tenant configuration, content you upload (controls, policies, evidence, contracts), and integration data you authorize us to pull from your connected systems. We do not collect personal data from your end customers unless you explicitly load it.
How we use it
We use your data to provide the service: render your tenant, run your workflows, store your evidence, generate your reports. We do not sell, license, or share your data with third parties. We do not train shared AI models on your data. Tenant data stays in your tenant.
Where it lives
Each customer gets a single-tenant deployment on AWS: its own containers, its own Postgres database, its own storage. Nothing is shared with another customer at the row level because nothing is shared at all. Deployments so far have run in two AWS US regions. No EU region has been deployed yet; if you need one, say so before we provision.
Subprocessors
AWS hosts every deployment. Sentry captures application errors. For AI features the language model provider is chosen per deployment: Anthropic by default, or a model you run yourself through Ollama or any OpenAI-compatible endpoint. An air-gapped mode keeps AI traffic inside your own network. If you turn on the AI teammate’s memory, Voyage AI computes the text embeddings it uses.
Your rights
You can export your data as CSV. Parquet export is not built. At termination your deployment, its database and its storage are deleted. EU subjects have their GDPR rights, including access, correction, deletion, portability, and the right to complain to a supervisory authority.
Cookies and analytics
The marketing site at opsnite.com uses no third-party analytics. The product surfaces use first-party cookies for session management only. We do not use behavioral tracking, advertising pixels, or session-replay tools.
Contact
Privacy questions go to privacy@opsnite.com. EU representative inquiries go to the same address marked “EU Rep” in the subject line. We respond within five business days.
Last updated 2026-10-13. This page reflects current practice; the formal Data Processing Agreement and Privacy Policy are made available at contract signing.