Enterprise Data Protection & Sovereign Privacy

Privacy Policy & Video Governance

Effective Date: November 4, 2026•Compliance: GDPR · CCPA · ISO/IEC 27701•Version: 3.2 Enterprise

Our Sovereign Privacy Commitment in Brief:

  • 100% on-premises edge execution available
  • Real-time cryptographic facial blurring in GPU RAM
  • Zero customer video used for public model training
  • Ephemeral volatile memory auto-purge within milliseconds

1. Real-Time Hardware-Accelerated Biometric De-Identification

Genovaxai is architected from foundational principles around privacy-preserving computer vision. In workplace safety, manufacturing, and public facility deployments, our neural ingestion pipeline features configurable, hardware-accelerated biometric de-identification. Facial geometry, high-resolution iris signatures, and license plate characters are automatically blurred directly in GPU Unified Memory prior to frame persistence or console streaming.

2. Air-Gapped Sovereign Edge Processing (Zero Cloud Egress)

When deployed in Air-Gapped or Sovereign Edge Mode (on NVIDIA Jetson Orin or localized on-prem servers), raw video feeds never cross your physical facility perimeter. All spatial reasoning, bounding box detection, and velocity telemetry are calculated locally on your silicon hardware. Only customer-approved alert webhooks or mathematical coordinate metadata are dispatched to your internal network.

3. Cryptographic Ingestion & Transport Security

All video streams ingested via RTSP, WebRTC, GStreamer, or ONVIF protocol are transmitted over TLS 1.3 encrypted sockets with mandatory mutual certificate validation. Any temporary alert snapshots or incident video clips written to edge or cloud storage are encrypted using AES-256-GCM with customer-managed encryption keys (CMEK).

4. Ephemeral Buffer Lifecycle & Automated Retention Limits

Genovaxai strictly prohibits indefinite video accumulation:

  • Volatile GPU Buffers: Raw camera frames residing in volatile NVDEC memory are overwritten continuously within 16.6 milliseconds (at 60 FPS) once tensor inference completes.
  • Telemetry Metadata: Extracted bounding box coordinates, category classifications, and trajectory logs are retained for the duration configured in your enterprise SLA (e.g. 7, 30, or 90 days).
  • Incident Snapshots: Safety hazard alerts (e.g. PPE violations, proximity collision warnings) are archived strictly per your internal corporate retention rules and purged automatically thereafter.

5. Absolute Ban on Third-Party Public Model Training

Genovaxai unconditionally commits that customer operational video footage, manufacturing telemetry, and private facility feeds are never aggregated, leased, or utilized to train public foundation models. Custom neural adaptation (fine-tuning) is isolated in single-tenant customer containers with dedicated cryptographic keys.

6. GDPR, CCPA & Global Regulatory Compliance

We comply with the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and regional data sovereignty mandates. Data subjects retain rights to data access, rectification, objection to processing, and erasure. For enterprise deployments, we execute formal bilateral Data Processing Agreements (DPAs) incorporating EU Standard Contractual Clauses (SCCs).

7. Security Audits & Continuous Compliance

Our infrastructure undergoes continuous third-party penetration testing and independent SOC 2 Type II audits. All software container releases are scanned for vulnerabilities and signed cryptographically before deployment to the Genovaxai registry.

8. Data Protection Officer (DPO) Contact

If you have any questions regarding our video governance architecture, privacy policies, or wish to execute a custom DPA:

Genovaxai Inc. — Data Protection Office
Security Operations: security@genovaxai.com
Corporate Headquarters: Rukunpura, Ved Nagar, Rukanpura, Patna, Bihar - 800014, India
Executive Leadership: Kumar Pranav (Founder & CEO)