No training on your data
We do not use your organization's governance data to train machine-learning models for other customers.
Data custody
Metadata only, by pointer.
The platform is a monitoring and evidence layer. It processes product-security governance metadata — records about policy evaluations, approvals, and system events — and references your organization's underlying records by pointer. It is not designed to take custody of your firm's client records or communications content, and your organization remains responsible for the retention and custody of its own records.
Verdicts are pure functions of the evidence. No model sits in the verdict path, so the same evidence yields the same result — and coverage gaps are surfaced as named unknowns, never silently treated as a pass.
Commitments
What we do, and don't do, with your data.
Least privilege by default
Encryption in transit, least-privilege access controls, managed identities instead of shared credentials, and logged administrative activity.
No sale of personal information
Information is shared only with service providers under confidentiality obligations, marketplace operators as required to process a subscription, and authorities where the law requires it.
Your data stays yours
Your organization owns the data it submits or generates through the platform - policies, configurations, evidence records, and governance records.
Availability
Where and how Efeeo runs.
Efeeo is available through the Microsoft Azure Marketplace. For marketplace purchases, the marketplace operator sends us the transaction and entitlement information needed to provision your subscription — subscription identifier, plan, and purchasing tenant.
We are based in the United States and process information there. Our infrastructure and operations are supported by service providers — cloud hosting, email, and analytics — under confidentiality obligations.
Questions about our compliance roadmap, subprocessors, or security practices: contact@efeeo.com.
Vulnerability disclosure
Found something? Tell us.
If you believe you have found a security vulnerability in efeeo.com or an Efeeo product, email contact@efeeo.com with enough detail to reproduce the issue. We acknowledge reports within one business day, and we will not pursue legal action against good-faith research that respects user privacy and avoids service disruption.
Machine-readable contact details are published at /.well-known/security.txt.
The fine print lives in the privacy policy and terms of use.
Get started
Put your consequential decisions on the record.
See how Efeeo assembles the evidence, names the unknowns, and routes every disposition to a named human for sign-off.