Data Sovereignty & Privacy Policy
1. The 100% Local Data Sovereignty Guarantee
Unlike legacy cloud WAFs (such as Cloudflare or AWS WAF) that require you to delegate your domain's DNS and decrypt all incoming SSL/TLS traffic in their third-party cloud data centers, SATGuardian is architected for strict data sovereignty.
Guarantee: The SATGuardian reverse proxy binary runs 100% on your own infrastructure (Windows Server IIS, Linux VPS, or Docker container). Your user traffic, POST body parameters, passwords, credit card numbers, and session cookies NEVER leave your server.
2. What Is Sent to satguardian.tech?
The only communication between your local SATGuardian WAF instance and satguardian.tech consists of:
- License Verification: Periodically checking API key validity and active synthesis quota.
- Anonymized Anomaly Signatures: When you run
satguardian-waf syncor submit a false positive, only structural boolean token representations (e.g. variable indices, character encodings, and clause structures) are transmitted. Raw user data is stripped client-side prior to transit. - Compiled Rule Updates: Downloading pre-compiled binary SAT matrices (BLIF/JSON format) for local execution.
3. Ephemeral In-Memory Cloud Synthesis
When rule synthesis jobs are processed on satguardian.tech:
- Synthesis executes purely in volatile RAM using our deterministic SAT solver engine.
- Once the simplified rule matrix is compiled and returned to your node, all intermediate clauses are zeroized.
- Customer security rules are never shared with or exposed to other tenants.
4. GDPR, HIPAA & PCI-DSS Compliance
Because SATGuardian does not decrypt, transmit, or store personal data (PII) or protected health information (PHI) in the cloud, using SATGuardian significantly simplifies your regulatory compliance burden. You remain the sole custodian of your cryptographic keys and data streams.
5. Inquiries & Privacy Officer
For inquiries regarding data protection or compliance audits:
Email: privacy@satguardian.tech / support@satguardian.tech
Website: https://satguardian.tech