← Back to Docs

Compliance & Security

Built for regulated industries. Privacy, security, and auditability are non-negotiable.

Compliance-First Architecture

LLM Never Scores or Decides

The LLM layer is strictly limited to narration. All scoring and decision-making is handled by the deterministic ML core (logistic regression, GBDT). This separation ensures predictable, auditable outputs.

No Protected Attributes

DiCorner does not use race, gender, income, or any protected attribute in modeling. Behavioral events only.

Complete Audit Trail

Every decision is reproducible. Each output includes a trace_id linking to: input events, model version, rule pack version, NBA output, explanation output, and any human overrides.

Circuit Breakers

If ML model drift exceeds 20%, the system auto-reverts to rule-based recommendations. No 'AI gone rogue' scenarios.

Data Security

MeasureDetail
Encryption in transitTLS 1.2+
Encryption at restAES-256
Access controlRole-based access, multi-factor authentication
Monitoring24/7 security monitoring, intrusion detection
AuditsRegular security audits, penetration testing
Incident responseBreach notification within 72 hours

Regulatory Compliance

GDPR

  • Right to access, rectification, erasure
  • Data portability
  • Consent management
  • Standard Contractual Clauses for transfers

CCPA

  • Right to know, delete, opt-out
  • No sale of personal information
  • Non-discrimination for exercising rights

Data Retention

Data TypeBuilderGrowthEnterprise
Behavioral events7 days90 daysUp to 2 years
Cognitive scores7 days90 daysCustom
Audit logs7 days1 yearCustom
Account dataUntil deletionUntil deletionUntil deletion

Enterprise Deployment Options

SaaS (Multi-Tenant)

Hosted by DiCorner. Fully managed, auto-scaling, shared infrastructure with logical isolation.

Single-Tenant (Dedicated)

Isolated infrastructure for your organization. Same SaaS convenience with dedicated resources.

VPC / On-Premises

Deploy DiCorner within your own cloud VPC or on-premises infrastructure. Full data sovereignty.

Need a security review or compliance questionnaire?