Privacy Policy

Last updated: 5 July 2026 · CSOAI Ltd (Companies House 16939677) · GDPR COMPLIANT UK GDPR COMPLIANT DEFENCE-GRADE

1. Data Controller

CSOAI Ltd is the data controller for the DEFONEOS platform (open source, hosted enterprise, and government tiers).

• Company: CSOAI Ltd
• Companies House: 16939677
• Registered Office: London, United Kingdom
• R&D: Yorkshire, United Kingdom
• Data Protection Officer: Available on request (required for large-scale processing)

2. Data We Process

2.1 Open Source Tier (Free)

The open-source DEFONEOS software processes data entirely on your infrastructure. CSOAI Ltd does not receive any data from open-source deployments. The software itself may process:

• Sensor data: Satellite imagery, AIS positions, weather feeds, air quality, IoT telemetry — processed locally on your hardware
• Operational data: Unit positions, sensor readings, ISR pipeline outputs — stored in your local database
• System logs: SIGIL chain entries (Ed25519-signed audit records) — stored locally, immutable

2.2 Enterprise/Hosted Tier

For customers using CSOAI-hosted DEFONEOS infrastructure, we process:

2.3 Government/MOD Tier

3. Lawful Basis for Processing

4. Data Sovereignty Guarantees

• Air-gap operation: Full 30-MCP sensor suite, BFT council, ISR pipeline, and Cesium globe run on local hardware (Jetson Orin, Raspberry Pi, rack server). No internet required.
• No cloud dependency: Open-source tier has zero external calls. No telemetry, no phone-home, no analytics.
• SIGIL chain integrity: Every data access, AI decision, and system action is Ed25519-signed and hash-chained. Tampering is mathematically detectable.
• Geographic sovereignty: Enterprise tier can be deployed in UK-only, EU-only, or any sovereign region. No cross-border data flow without explicit configuration.
• Right to erase: Data deletion triggers SIGIL tombstone entries. Deletion is provable on the audit chain.

5. Retention & Deletion

6. Data Sharing & Third Parties

DEFONEOS does not sell data. We do not share data with advertisers, data brokers, or third parties for commercial gain.

Data may be shared with:

• Cloud providers: Only for enterprise-hosted tier (customer-selected region). DPA in place.
• Legal authorities: Only under court order or statutory obligation. SIGIL-audited.
• Sub-processors: Listed in our DPA. Customer must approve before activation.

7. Your Rights Under GDPR

• Right of access (Art 15): Request a copy of all data we hold about you
• Right to rectification (Art 16): Correct inaccurate data
• Right to erasure (Art 17): "Right to be forgotten" — triggers SIGIL tombstone
• Right to restrict processing (Art 18): Limit processing temporarily
• Right to data portability (Art 20): Export your data in machine-readable format
• Right to object (Art 21): Object to processing based on legitimate interests
• Right not to be subject to automated decision-making (Art 22): See Section 9 below

To exercise any right, contact the Data Protection Officer. Response within 30 days (GDPR requirement).

8. SIGIL Audit Chain

9. AI Processing & Article 22 (Automated Decisions)

DEFONEOS includes AI capabilities (ISR pipeline, threat detection, ISR correlation, intuition engine). Under GDPR Article 22:

• No solely automated legal/significant decisions: DEFONEOS AI provides recommendations to human operators. Final decisions are made by authorised personnel.
• BFT council gate: Critical actions require 2/3 majority from the 33-node BFT council. This is a human-configurable threshold.
• Full audit trail: Every AI recommendation is logged with model version, input data, confidence score, and human override decision.
• Explainability: DEFONEOS provides decision rationale for all AI outputs. See ISR Pipeline.

10. Security Measures

• Post-Quantum Cryptography: ML-DSA-65 (Dilithium) + ML-KEM-768 (Kyber) — NIST PQC standards
• Zero Trust Architecture: Every request authenticated and authorised
• Ed25519 signatures: All inter-agent communications cryptographically signed
• Air-gap capability: Full offline operation for classified environments
• JSP 440 alignment: Manual handling controls mapped
• STRIDE threat model: Continuous threat modelling across all components
• Cyber Essentials: Application in progress (mandatory MOD baseline)

See Security Architecture for full details.

11. International Transfers

Default: No international transfers. The open-source tier operates entirely on your infrastructure. The enterprise tier can be configured for UK-only, EU-only, or any sovereign region.

Where international transfers are explicitly configured (e.g., NATO allied deployment), appropriate safeguards are in place: Standard Contractual Clauses (SCCs), adequacy decisions, or sovereign-to-sovereign agreements.

12. Children's Data

DEFONEOS is a defence and public services platform. We do not knowingly process children's data. The platform is not directed at individuals under 18.

13. Changes to This Policy

This policy may be updated as DEFONEOS evolves. Material changes will be announced via the SIGIL chain and this page. The "Last updated" date above reflects the most recent revision.

14. Contact & Complaints