ProdigyIQ

ProdigyIQ Operational Intelligence

Security

How to report an incident, who owns security, and which processors run this product. This page is not a data processing agreement.

Security officer

David Craig · david@prodigy-iq.io

Report an incident

Email david@prodigy-iq.io with what you observed, when, and any affected tenant if you know it. Do not send passwords, recovery codes, or customer files to that inbox unless asked.

After we confirm an incident that affects a customer tenant, we email that tenant's admin within 24 hours.

Runtime subprocessors

This is the customer subprocessors exhibit for Operational Intelligence. It is not a signed data processing agreement.

  • Vercel. Application hosting and CDN. HTTPS requests, logs, and environment configuration. Not a customer database.
  • Supabase. Auth, Postgres, and private Storage for Operational Marketplace. Auth users, tenant rows, and files in piq-tenant-files.
  • OpenAI. GPT models chosen per task (gpt-6-luna by default; gpt-6.1-terra only for large 8D) for copilot, 8D, and NCP when those features run. Case and NCP text only when AI is on for that tenant and the platform kill-switch is on.
  • GitHub. Source control for ProdigyIQ-Operational. Source code and CI. Not a runtime customer-data plane.

Retention in the product today

Product retention schedule enforced by this application. It is not a signed data processing agreement. Counsel may still map these facts into a customer contract.

  • Cases, NCP, documents, API keys, webhooks, tenant files. Kept while the tenant is active, trial, or suspended. After cancel, operational data is purged on a 90-day clock. Export any needed records before that purge. Company shell, locations, and user roster remain.
  • Companies and tenant users. Cancelled or suspended tenants cannot sign in. After the operational purge, the company shell, locations, and user roster are kept indefinitely until a platform owner deletes them. There is no automatic shell purge.
  • Tenant files. Private bucket piq-tenant-files until deleted or until the cancelled 90-day purge. Download needed evidence before purge. A Postgres restore does not restore deleted Storage objects.
  • Auth and ops audit. Auth login emails and IPs in audit_events are kept for 365 days, then deleted by the retention sweep. ops_alerts and ops_heartbeats have no automatic TTL. In-app auth and platform audit lists are capped at 1000 and 2000 entries for operations, not as a legal archive.
  • AI prompts. Case and NCP text is sent to OpenAI only when AI is on for that tenant and the platform kill-switch is on. Platform AI governance or tenant aiEnabled off stops new sends (403 ai_disabled). OpenAI is listed under Runtime subprocessors on this page.

Vendor trust centers

SOC reports are collected from these portals into an offline file store. They are not committed to git and are not hosted on this site.

Sign in