Privacy Policy

1. Introduction

Case Intelligence Assistant (“CIA,” “the Platform,” “we,” “us,” or “our”) is an AI-powered investigative file analysis platform designed for law enforcement and investigative professionals. This Privacy Policy explains how we collect, use, store, and protect information in connection with the Platform and this website.

2. Air-Gapped Architecture & Data Handling

The Case Intelligence Assistant platform is designed for fully air-gapped, local-only deployment. This means:

• All case data, documents, and evidence files remain on the deploying organization's own hardware at all times.
• No case data, query content, AI-generated responses, or investigative materials are transmitted to external servers, cloud providers, or third parties.
• All AI models (language models, embedding models, entity recognition models) run locally on the deployment hardware.
• No internet connection is required after initial setup and model download.
• There is zero exposure to the US CLOUD Act or any foreign data access framework.

3. Website Data Collection

This marketing website (separate from the Platform) may collect limited information:

3.1 Information You Provide

When you submit the demo request form, we collect: your name, email address, phone number, agency or organization name, and any additional information you provide in the message field. This information is used solely to respond to your inquiry and arrange product demonstrations.

3.2 Automatically Collected Information

We may collect standard web server logs including IP addresses, browser type, referring pages, and pages visited. We do not use third-party analytics, advertising trackers, or social media pixels on this website.

3.3 Cookies

This website does not use cookies. No first-party or third-party cookies are set when you visit this site. No tracking cookies, session cookies, or advertising cookies are used at any time.

4. How We Use Information

• To respond to demo requests and product inquiries
• To communicate with prospective clients about the Platform
• To improve the website and user experience
• To comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Data Retention

Contact form submissions are retained for up to twenty-four (24) months from the date of last contact, unless you request earlier deletion. You may request deletion of your submitted information at any time by contacting us at the address provided in Section 12 below.

6. Data Residency

Information submitted through the demo request form on this website may be processed and stored on infrastructure located in Canada or the United States, depending on the hosting provider. The specific hosting location will be disclosed upon request. Case data processed by the Platform itself is stored exclusively on the deploying organization's own hardware and never leaves their premises.

7. Platform Data & Compliance

When the Platform is deployed within your organization:

• Your organization retains full ownership and control of all case data, documents, and analytical outputs.
• The Platform maintains a complete audit trail of all operations for legal defensibility and disclosure compliance (R v. Stinchcombe).
• Data handling complies with the Privacy Act (Canada) and is designed to meet the transparency and auditability requirements of Canadian law enforcement AI governance standards.
• For organizations subject to Quebec's Act to Modernize Legislative Provisions Respecting the Protection of Personal Information (Law 25), the Platform supports compliance with applicable privacy impact assessment and data governance obligations. Specific Law 25 requirements will be addressed in the individual license agreement.
• No data is processed by or accessible to Case Intelligence Assistant or its personnel once the Platform is deployed on your infrastructure.

8. Security

We implement appropriate technical and organizational measures to protect information. The Platform's air-gapped architecture is the primary security control — by design, sensitive investigative data never traverses a network beyond the deployment environment.

9. Breach Notification

In the event of a confirmed security breach involving personal information collected through this website, we will notify affected individuals and report to the relevant privacy authority within seventy-two (72) hours of confirming the breach, in accordance with PIPEDA breach notification requirements and applicable provincial privacy legislation.

10. Your Rights

You have the right to access, correct, or delete any personal information you have provided to us through this website. To exercise these rights, please contact us using the information in Section 12 below.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.

12. Contact

For privacy-related inquiries, data access requests, or to exercise your data rights, please contact our Privacy Officer: