Privacy

How ARIA handles tenant, operational, and employee-profile data.

Tenant isolatedAudit retainedConfidential by default

Data posture

ARIA processes Ardham operational and client data within the Ardham tenant under hybrid RBAC + ABAC, per-tenant isolation (RLS), AES-256 at rest, TLS 1.3 in transit, and SHA-512 hash-chained audit (FPB §20.1). EmployeeProfile data is classified Confidential and used only for developmental training (FPB §11.10.2).

GDPR and CCPA awareness is built in; right-to-delete is enforced at the data layer. See the Security & AI Governance Handbook for the full posture.