We don't train AI models on your schedules. We don't sell, share, or repurpose your project data. You can export everything and delete it on demand — including the audit trail.

• Zero AI training — your XER, MSP, costs, dates, and resource data are never used to train any model, ours or the provider's.
• You own your data — full XER / CSV / PDF export at any time. Cancel and walk away with everything you put in.
• Right to deletion — one click wipes your projects, audit log, AI conversations, and account. GDPR-aligned process.
• No third-party trackers — no Meta pixel, no LinkedIn ads pixel, no advertising cookies on the app.

The data model, calculation engines, and tool permissions sit underneath the AI — not the other way around. The AI cannot invent fields, change baselines, or skip validation. Every numeric output is reproducible.

• Deterministic engines — CPM, DCMA-14, EVM are exact algorithms. The AI asks the engines, doesn't compute.
• Scoped tool permissions — fixed allowlist (add task / link / set progress / run CPM). No file system, no billing, no DB.
• Visible reasoning trace — every AI action shows tool used, data inspected, change proposed, decision logged.
• Refuses outside scope — asked to invent a task code or alter a baseline? It says no. The boundary is in code, not in a prompt.

AWS-hosted. Encrypted at rest and in transit. Isolated per tenant. Our model provider runs under enterprise zero-retention, so your prompts are never stored or used for training by anyone.

• Encryption everywhere — AES-256 at rest, TLS 1.3 in transit, signed upload URLs, no public buckets.
• Tenant isolation — Cognito-based auth, JWT-verified API calls, project-level access checks on every request.
• Zero retention with the model provider — enterprise tier. Prompts not stored, not logged, not used for training.
• External audit compliance — annual third-party penetration tests; SOC 2 Type II audit in progress with a registered firm.