Privacy Policy
KB Analytical Solutions Inc. ("we," "us," or "our") is committed to protecting the privacy and security of the institutional data processed by the QUORUM Decision Infrastructure (the "Platform"). This Privacy Policy describes how we handle information in accordance with global regulatory standards, including PIPEDA, GDPR, and CCPA.
1. Data Minimization
The Platform is designed on the principle of data minimization. QUORUM is deployed inside each institution's own environment, so the data it processes remains within that institution's perimeter. Decision records hold a cryptographic digest of the inputs rather than the inputs themselves, and card and account numbers are represented by institution-scoped keyed hashes.
2. Information Collection
To provide high-fidelity risk orchestration, the Platform may collect and process the following technical telemetry:
- Network edge metadata (IP addresses, JA3/TLS fingerprints, HTTP/2 headers).
- Behavioral cadence data (input velocity, navigation patterns, session entropy).
- Cryptographic hashes of transaction attributes.
- Device-specific hardware identifiers (normalized and hashed).
3. Data Retention
Decision records are sealed into a tamper-evident, hash-chained and signed ledger stored in the institution's own database. Retention periods are set by each institution according to its legal and regulatory obligations.
4. Security Architecture
We implement institutional-grade security controls, including:
- AES-256 encryption at rest and TLS 1.3 encryption in transit.
- Signing keys held in an AWS Nitro Enclave in production deployments.
- Every request scoped to one institution, with database row-level security policies.
- Automated audit logging of all administrative access to the control plane.
5. International Data Transfers
Data is stored and processed where the institution deploys QUORUM — on its own premises or in its private cloud. KB Analytical Solutions does not host institutional data.
6. Rights of Data Subjects
Institutions respond to data subject requests (such as access and erasure) under their own procedures, subject to mandatory financial record-keeping laws. QUORUM's data minimization limits the personal information held in decision records; it does not provide an automated request workflow.
7. This Website
When you use the contact or document-request forms on this website, we collect the name, role, organization, email address and message you provide, and our web server records your IP address. We use this information only to reply to you and to assess requests for materials. These forms do not collect device fingerprints. The website is served through Cloudflare.
8. Contact Information
For inquiries regarding this Privacy Policy or our data governance practices, please contact our Data Protection Officer at: [email protected]