Fidacy uses distinct paths for local operation, anonymous product telemetry and account-backed evidence. They serve different purposes and have different data boundaries.
The local observer maintains the session ledger and hash chain on the customer machine. The local firewall can run without an account. File contents and document bodies remain local. Credentials are redacted before a record is written.
Anonymous telemetry measures installation, agent activity, coarse decision outcomes, client version and runtime channel. It does not include message text, prompts, file paths, payment details, recipient data or file contents. It can be disabled.
When an organization connects Agent Sessions, Fidacy stores the operational trail in that organization’s tenant so its security, compliance and insurance teams can investigate later. The record can include action category, tool, timestamp, redacted target, machine and runtime context. Message actions can include message text. It never includes the contents of files or documents, and credentials are redacted at source.
A control cannot be assessed from an empty log. Account-backed evidence lets the customer demonstrate what the control observed, whether a decision was made before an action and whether the record remained intact.
To issue a signed verdict, the service processes organization and API identity, agent identity, mandate, structured risk metadata and the resulting decision. Account and billing information operate the account. Security logs may include timing, error codes and network information used for abuse prevention and rate limiting.
Account and assessment records are kept for the life of the account and for the operational, audit and dispute period that applies to the service. External checkpoints are permanent by design and contain hashes, not file contents or payment credentials. To request access, correction, export or deletion of personal information, contact privacy@fidacy.com.
Fidacy uses service providers for hosting, managed database, billing and service operations. The current list is available in the Trust Center. Material changes will be reflected here with a new effective date.