Legal review
Data Processing Addendum
Contract terms for processing customer personal data.
Open document →About this Trust Center
These materials explain the security, privacy and responsible AI controls supporting the OpsRabbit product and related support. Contractual documents identify the legal service provider, and control ownership depends on the agreed deployment model.
Security, privacy and responsible AI documentation
Public
Security and Organizational Measures
Product, people and operational safeguards.
Open document →Public
Subprocessors and AI Providers
Current allocation of provider and customer responsibilities.
Open document →Public
AI Data Use and Model Transparency
How OpsRabbit handles prompts, outputs and model endpoints.
Open document →Public
Audit and Assurance
Evidence-first approach to customer assurance requests.
Open document →Public
Business Continuity and Recovery
Continuity governance for customer-hosted deployments.
Open document →Public
Vulnerability Disclosure
How security researchers can report a concern.
Open document →Public
Incident and Breach Notification
Customer-facing incident response commitments.
Open document →Public
Retention, Deletion and Audit Logging
Data lifecycle and audit evidence by deployment.
Open document →Public
AI Security Whitepaper
Prompt injection, tool restrictions, DLP and human approval.
Open document →Public
Responsible AI Policy
Principles for safe, accountable use of AI.
Open document →Public
AI Governance Framework
Lifecycle governance for OpsRabbit AI capabilities.
Open document →Public
Shared Responsibility
Control ownership across OpsRabbit, the customer and providers.
Open document →Public
Data Flow and Handling
Customer-hosted deployment data boundaries and flows.
Open document →Public
Security Testing and Assurance
VAPT status and certification posture.
Open document →Assurance evidence
Customer-safe summaries are public. Detailed penetration-test material, system diagrams, control evidence and independent assurance reports are provided through a controlled request process and, where appropriate, under confidentiality terms.