Privacy Policy

Learn how empirik collects, uses, and safeguards your personal data when using our change intelligence and infrastructure platform.

01.

Introduction

empirik Inc. (“we”, “us”, “our”) is the company behind empirik, a modern platform for change observability, governance, and impact analysis in dynamic cloud and application environments. empirik empowers organizations with real-time insights, enabling faster incident resolution, improved compliance, and operational resilience.

We value your privacy and are committed to protecting personal data. This Privacy Policy outlines how we collect, use, and safeguard your information and explains your rights regarding your personal data.

02.

Commitment to Data Privacy

empirik is designed with privacy and data minimization as foundational principles. The platform operates within customer-managed infrastructure—whether self-hosted or on a private SaaS instance—and does not collect or process any sensitive personal information as defined under global data protection regulations.

03.

Use of AI (Llama3)

empirik includes features powered by Llama3, a generative AI model used for:

  • Graph crawling
  • Cypher query generation

All Llama3 interactions occur within the customer’s local environment:

  • Llama3 endpoints are locally deployed and do not send any data outside the customer-controlled boundary.
  • No data from empirik is shared with external AI providers or third-party AI services.
  • Llama3 does not process or access any sensitive data.
04.

Data We Do Not Collect or Process

empirik Inc. does not collect, store, or process any of the following categories of sensitive data:

Personally Identifiable Information (PII):

  • Full name, email address, home/work address
  • Phone number, national ID, passport or driver's license number
  • Any unique identifiers that could identify an individual

Financial Information:

  • Bank account numbers
  • Credit/debit card details
  • Financial records or account balances

Health Information:

  • Medical records or insurance data
  • Biometric or genetic information

Other Sensitive Information:

  • Racial or ethnic origin
  • Political or religious beliefs
  • Trade union membership
  • Sexual orientation or sex life
  • Criminal history or judicial records
05.

Website and Business Contact Data

We may collect basic business contact data via:

  • Website forms
  • Event registrations
  • Professional networks (e.g., LinkedIn)

What We May Collect:

  • Name
  • Job title
  • Employer name
  • Business email and phone
  • Address for billing purposes
  • IP address and browser metadata (for analytics)

We use this information to provide services, respond to inquiries, and send relevant communications. We do not sell personal data and only share it with service providers involved in delivering our services.

06.

Cookies and Tracking

empirik’s website uses cookies and analytics tools to:

  • Improve site functionality
  • Understand visitor behavior
  • Enhance the user experience
07.

Data Storage and Hosting

All operational data related to empirik is stored:

  • In infrastructure controlled by the customer (self-hosted or private SaaS)
  • In secure, access-controlled environments
  • Using encryption at rest and in transit

We retain customer contact and website data as long as there is a business relationship or interest, and delete it upon request.

08.

International Data Transfers

empirik Inc. is headquartered in California, United States. If personal data is processed in the U.S., we ensure that:

  • Transfers are based on consent or legitimate interest
  • Appropriate contractual safeguards (e.g., Standard Contractual Clauses) are in place
09.

Your Rights (GDPR and Global Privacy Laws)

Depending on your jurisdiction, you may have the right to:

  • Access your personal data
  • Request correction or deletion
  • Object to or restrict processing
  • Request data portability
  • Lodge a complaint with a supervisory authority

To exercise your rights, contact us at: privacy@empirik.ai

10.

Data Security

empirik Inc. enforces strong technical and organizational controls:

  • Role-based access control
  • Audit logs and continuous monitoring
  • End-to-end encryption in transit and at rest
  • Secure authentication and identity federation
  • Zero data sharing with external AI services or unauthorized third parties

Also, empirik has successfully attained SOC 2 Type 2 attestation, affirming the effectiveness of its security controls over time.

11.

Children’s Data

empirik is not intended for use by children, and we do not knowingly collect or process any personal data from individuals under the age of 16. If we discover that such data has been inadvertently collected, we will promptly delete it.

12.

Sharing Information with Third Parties

We do not sell or disclose your personal information to third parties for their independent marketing or commercial purposes.

We may share limited business contact data only with:

  • Cloud infrastructure providers solely for service delivery
  • Vendors that support operations under strict data processing agreements
  • Authorized partners or co-hosted event sponsors, with notice or consent
  • Legal authorities when required to comply with law, protect our rights, or respond to emergencies

All such sharing is done with confidentiality protections and limited scope.

13.

Data Retention and Deletion

We retain personal and service-related data as follows:

  • Customer operational data: Stored in customer-managed systems, retention controlled by the customer
  • Business contact data: Retained as long as there is ongoing communication or consent
  • Website analytics and cookies: Retained per cookie policy

You may request deletion of your personal data at any time by contacting us at: privacy@empirik.ai. Upon verification, we will delete such data unless retention is legally required.

15.

Contact Us

empirik Inc.

Email: privacy@empirik.ai

// HAVE A STACK WE HAVEN'T NAMED?

Run into something we haven't named?

empirik is provider-agnostic. If a system declares infrastructure or records change, it can become part of the compiled graph.

+ more