A.

COMPAS.one

Deploy
Return to Compas Enterprise
SOVEREIGN ENTERPRISE COMPLIANCE

Sovereign Data Governance & Privacy Policy

Compas operates on an uncompromising Zero-Data Exfiltration guarantee. Learn how our air-gapped architecture preserves total client confidentiality under POPIA and GDPR.

1. The Zero-Exfiltration Standard

Compas systems are engineered from the Linux kernel level up to ensure that client institutional data—including document archives, conversational prompts, vector embeddings, voice audio, and database records—never leaves the subscriber designated hardware or private cloud perimeter. Unlike multi-tenant public AI interfaces, Compas deploys dedicated model weights and local vector indices that operate 100% offline or inside isolated client VPCs. No user data is ever collected, aggregated, or utilized for AI model re-training.

2. Jurisdiction & Regulatory Compliance

Compas operations strictly comply with the South African Protection of Personal Information Act (POPIA No. 4 of 2013) and the European Union General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR). All processing of personal information is conducted exclusively within the subscriber lawful mandate and designated sovereign geographical zones (such as South Africa africa-south1 or client on-premise data centers).

3. Enclave & Network Segmentation

All network traffic within a Compas deployment is segmented using isolated IEEE 802.1Q VLANs and local cryptographic WireGuard mesh topologies. Outbound telemetry daemons and crash reporting trackers are permanently purged and blocked at the Linux kernel packet filter level. Inbound access is strictly mediated by client-controlled SSH ed25519 keys, TPM 2.0 cryptographic attestations, or enterprise OAuth identity providers.

4. Immutable Event Audit Trail

Every configuration modification, document ingestion event, and administrative command is committed to an immutable append-only ledger backed by SHA-256 Merkle-tree verification. Subscribers maintain complete administrative visibility and evidentiary chain-of-custody over all autonomous processes.

5. Cryptographic Sanitization & Deletion

Subscribers retain exclusive and unconditional ownership of all generated knowledge graphs, conversational archives, and transient caches. Upon termination of engagement or explicit administrative directive, Compas provides one-touch cryptographic shredding that irrevocably sanitizes all volatile RAM disks and persistent LUKS2 encrypted storage blocks.

Legal Inquiries & Architecture Compliance

To request an executed Data Processing Addendum (DPA) or submit a custom enterprise procurement checklist, contact our compliance council directly at legal@compas.one.

A.

COMPAS.one

Pure Intelligence Engineering Conquest. The sovereign artificial intelligence operating system and autonomous enterprise infrastructure. Engineered for institutional data sovereignty, air-gapped private compute, and verifiable cryptographic privacy.

enterprise@compas.one•+27 81 858 4889•POPIA & GDPR Compliant

© 2026 Compas Technologies. All rights reserved. Sovereign Silicon Division.

100% Zero-Data Exfiltration Standard.