🔒 Transient by Default — You Control What's Stored
Every file you upload to AIDC — PLC code, P&ID drawings, network configurations, EPMS data — is processed in memory and discarded after the response. Nothing is written to file storage or the search index unless a tenant admin explicitly opts in to Document Vault or the persistent Knowledge Base. When you do opt in, you can delete any single file, your entire vault or knowledge base, or purge all of your data at any time — deletion cascades across files, metadata, index chunks, and knowledge-graph edges and is irreversible. Billing and invoice records are retained for tax compliance.
🧠
Not Used to Train AI Models
Your files are processed only to serve your requests. L2 and L3 features use the Anthropic Claude API; your content is not used to train AI models. L1 reviews are deterministic rule engines that run in our own environment.
🔐
Encrypted in Transit & at Rest
All traffic between your browser and AIDC is encrypted in transit over HTTPS/TLS. Data you choose to store is encrypted at rest using our cloud provider's default encryption. AIDC is hosted in the Tokyo (asia-northeast1) region.
📋
Immutable Audit Trail
Sensitive actions — deletions, consent changes, and billing events — are recorded to an append-only audit trail with timestamp, user ID, and tenant ID. Your uploaded file contents are never written to this trail.
🔑
Opt-In Storage, Admin-Controlled
Document Vault (file storage) and the persistent Knowledge Base (searchable index) are OFF by default. They can only be enabled by a tenant admin, and each consent is recorded to an append-only audit log. You can delete a single file, your whole vault or knowledge base, or purge all your data in one action at any time — deletion is irreversible.
🌐
Isolated to Your Tenant
Every read, write, and delete is scoped to your authenticated tenant ID, taken from your session and never from request input. There is no cross-tenant access to your files, metadata, or index.
⚙️
On-Prem / Air-Gapped Deployment
For Enterprise and Platform tiers, AIDC can be deployed inside your own network or VPC, where inference runs within your environment. Available as a deployment option — contact us to discuss requirements.
By default nothing you upload is persisted. Storage is opt-in, admin-controlled, and deletable at any time.
| Data Type | Stored? | Where | Retention |
|---|
| Uploaded files (default) | No — transient | Processed in memory, discarded after response | Until the response completes |
| Original files with Document Vault (opt-in) | Only if enabled by your admin | Encrypted file storage, Tokyo region | Until you delete them |
| Parsed text with Knowledge Base (opt-in) | Only if enabled by your admin | Searchable index, Tokyo region | Until you delete it |
| AI prompts and responses | Not stored by AIDC | Processed to serve your request | Not retained by AIDC |
| Account information (name, email, company) | Yes | Managed cloud database, Tokyo region | Until account deletion |
| Billing & audit records | Yes | Managed cloud database, Tokyo region | Retained for tax & compliance |
| Session tokens (JWT) | Yes | Browser cookie only | 30 days or logout |
For enterprise customers who require formal agreements before sharing proprietary files.
Mutual NDA Available
LGC provides a standard mutual NDA covering PLC code, P&ID drawings, network configurations, and all engineering assets as confidential information. Available for signature before any file upload. Contact: info@lgc.inc
Enterprise Data Processing Agreement
A full Data Processing Agreement (DPA) aligned to GDPR principles and Japan APPI is available for Enterprise and Platform tier customers. Covers sub-processor relationships, breach notification, and data subject rights.
Compliance Roadmap
SOC 2 Type II audit in progress (target: Q3 2026). IEC 62443 alignment built into the platform architecture. SEMI E187 pre-certification is an L1 built-in tool. ISO 27001 planned for 2027.