Enterprise Data Privacy Policy
SYNORA SOFT INC. is dedicated to deterministic confidentiality, rigorous regulatory compliance, and ethical data protection across our cloud, autonomous AI, and simulation engineering practices.
Zero AI Model Ingestion
Client proprietary source code, internal schemas, and documents are never used to train or fine-tune public foundation AI models.
MATLAB® Model Isolation
Mathematical simulation models, MIL/SIL/HIL harnesses, and algorithms remain strictly isolated within sovereign client boundary enclosures.
Cryptographic Defenses
All data in transit is protected by TLS 1.3; all data at rest is secured via AES-256 with granular, role-based zero-trust access controls.
Global Rights Enforced
Full compliance with EU GDPR, UK GDPR, California CPRA, Texas TDPSA, and Singapore PDPA with guaranteed 30-day response SLAs.
1. Scope & Corporate Identity
This Privacy Policy applies to personal data, client information, and system telemetry processed by SYNORA SOFT INC. ("Synora Soft", "we", "our", or "us"), headquartered at 5900 Balcones Drive STE 100, Austin, Texas 78731, USA.
Synora Soft operates in two primary capacities under global privacy jurisprudence:
- As a Data Controller: When you visit our website, submit consultation inquiries, engage with our marketing communications, or apply for employment with Synora Soft.
- As a Data Processor / Service Provider: When enterprise clients engage us for digital transformation, ServiceNow/Salesforce platform modernization, cloud migration, AI agent deployment, or MATLAB® model-based engineering. In this context, we process data strictly under the instructions set forth in our Master Services Agreement (MSA) and Data Processing Agreement (DPA).
2. Information We Collect
We collect only the minimum necessary data to fulfill legitimate business, consulting, recruitment, and security purposes:
Name, professional title, corporate email, phone number, company name, and project scope details submitted via our executive consultation and contact forms.
IP address, device footprint, browser user-agent, edge request headers, referring URL, and session analytics processed via secure edge networks (Vercel & Cloudflare).
Curriculum vitae (CV), resumes, educational background, employment records, work authorization status, and portfolio repositories provided voluntarily for open roles.
Technical architecture diagrams, configuration scripts, and simulation inputs provisioned within client-owned VPCs, private clouds, or dedicated sandbox environments.
3. Lawful Bases for Processing
Under Article 6 of the General Data Protection Regulation (GDPR) and corresponding international privacy statutes, Synora Soft relies upon:
4. AI & Agentic Data Governance
Synora Soft enforces strict boundaries on all enterprise AI, Retrieval-Augmented Generation (RAG), and agentic automation pipelines:
- No Model Fine-Tuning: Client prompts, source code snippets, database records, and corporate documents are never passed to public LLMs for continuous pre-training, fine-tuning, or alignment.
- Ephemeral Session Processing: Inference contexts, agentic tool invocations, and vector embeddings reside in ephemeral, encrypted memory and are flushed immediately upon task termination.
- Differential Privacy & Redaction: Automated token sanitizers strip personally identifiable information (PII), proprietary keys, and confidential credentials before any inference request is executed.
5. MATLAB® & Simulink® IP Protection
Our specialized Model-Based Design (MBD) practice handles high-value mathematical models, control systems, and digital twins across aerospace, automotive, energy, and robotics sectors:
Sole Client Ownership of Model Intellectual Property
All Simulink® block models, Stateflow charts, physical equations, generated C/C++ or HDL code, and parameter files remain the sole, unencumbered intellectual property of the client.
Air-Gapped & Sovereign Simulation Environments
Simulation testing (MIL, SIL, PIL, HIL) is executed inside isolated virtual environments, sovereign cloud enclaves, or directly on client-hosted hardware test benches.
Export Control & EAR / ITAR Screening
Where simulation models involve dual-use or restricted defense technologies, Synora Soft applies strict personnel vetting, localized data residency, and full EAR/ITAR compliance.
6. Enterprise Platform Ecosystems (ServiceNow, Salesforce, Cloud)
As an implementation and consulting partner for ServiceNow, Salesforce, and major cloud hyperscalers (AWS, Azure, Google Cloud):
- Our consultants operate under Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) granted directly by the client's identity provider (Okta, Microsoft Entra ID).
- We operate with a Zero Data Exfiltration Policy: Production data never leaves the client's secured platform tenant. Development, test scripts, and integrations utilize synthetic, masked, or anonymized datasets.
7. Sub-Processors & Data Sharing
Synora Soft does NOT sell, rent, or trade personal data or client intellectual property to any third parties.We disclose personal data only to vetted sub-processors essential for corporate operations:
| Sub-Processor | Purpose | Location | Safeguards |
|---|---|---|---|
| Vercel Inc. | Edge Web Application Hosting & Serverless Execution | United States / Global Edge | SOC 2 Type II, ISO 27001, DPA with SCCs |
| Cloudflare Inc. | Web Application Firewall (WAF), DDoS Mitigation & DNS | Global Anycast | SOC 2 Type II, ISO 27001, TLS 1.3 |
| HubSpot / Salesforce | Enterprise Client Relationship Management (CRM) | United States / EU | SOC 2 Type II, EU-US DPF, Encrypted at rest |
8. International Data Transfers
Synora Soft provides global delivery capabilities with personnel across the United States, United Kingdom, European Union, India, and Singapore. Whenever personal data is transferred across international jurisdictions:
- We execute European Commission Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum with all international delivery units.
- Technical measures, including cryptographic tokenization, end-to-end encryption, and role-based access restrictions, ensure data cannot be intercepted or accessed by unauthorized foreign entities.
9. Security Controls & Data Retention
Synora Soft operates under an Information Security Management System (ISMS) modeled upon ISO/IEC 27001:2022 and audited for SOC 2 Type II trust principles:
Data Retention Schedules
- General Inquiries: Maintained for 24 months from last interaction or until resolution of the inquiry.
- Client Engagement Data: Purged or returned upon conclusion of the Master Services Agreement within 30 days.
- Recruitment Data: Retained for 12 months for consideration in future openings, unless candidate requests earlier erasure.
10. Your Privacy & Jurisdictional Rights
Depending on your jurisdiction (including the EU, UK, California, Texas, and Singapore), you possess the following statutory rights regarding your personal data:
12. Recruitment & Candidate Privacy
When applying for career opportunities at Synora Soft:
- Candidate profiles, resumes, and evaluation notes are processed exclusively by authorized talent acquisition specialists and interview panels.
- Data is stored within encrypted talent systems and is never disclosed to external commercial vendors or recruiters without your prior written authorization.
- Candidates may request full profile removal at any stage by emailing our recruitment compliance desk at careers@synorasoft.com.
13. Contact Our Data Protection Officer (DPO)
To exercise your statutory data privacy rights, file an inquiry, or report a suspected security concern, contact our Office of Data Privacy:
All verified privacy and deletion requests receive an official receipt within 48 business hours.
Submit Privacy Request