Trust · Security

Security

How we protect client data today, what is still in progress, and what we do not claim.
Report a security issue
Last updated 14 Oct 2026

In short

strategy1 protects client data by keeping each client's Strategy Twin separate, with role-based access, single sign-on and multi-factor authentication for staff, and NDA and data-processing terms signed before any data is shared. Encryption at rest with per-client keys is in progress, and strategy1 holds no security certifications today.

Controls

Every control carries its status

In place is true today. In progress is designed, not yet in place; no date is shown. Not claimed means we do not hold it.

Showing all 6 commitments.

CommitmentWhat it meansStatus
Client isolationEach client's Strategy Twin is kept separate. One client's data cannot be retrieved in another client's work.In place
Access controlRole-based access, single sign-on and multi-factor authentication for our staff.In place
EncryptionEncryption at rest with per-client keys, and TLS 1.2 or higher in transit.In progress
India-resident or on-premise deploymentNot offered today.Not claimed
ContractsNDA and data-processing terms are signed before any client data is shared.In place
Retention and deletionWe keep client data for the period your contract sets, then return or delete it.Per contract

Client isolation

One Twin per client, kept separate

Each client's Strategy Twin is kept separate. Strategy Twins model markets, assets and decisions, not people.
Fig 7.4One Strategy Twin per client. Engines reach each Twin separately; one client's data cannot be retrieved in another client's work.

Certifications

What we do not claim

strategy1 holds no security or AI management certifications today. That includes ISO 27001, SOC 2 and ISO 42001. When we hold one, this page will show the certificate, its scope and the auditor.
  • CertificationISO 27001Not claimed
  • CertificationSOC 2Not claimed
  • CertificationISO 42001Not claimed
We will add independent penetration testing results and professional indemnity cover here once they are in place.

Report a concern

Found a security issue?

Tell us what you found. Please do not test against client data.
What is it about? (required)

Please do not test against client data.

What you found, where, and how to reproduce it.

Characters used: 0 / 2000

We will use the details you give here to answer your request and, if you ask, to arrange a meeting. ELAN1 AGENTIC TECHNOLOGIES PRIVATE LIMITED (strategy1 is its brand) is the data fiduciary. We keep them for 12 months after our last contact, then delete them. You can ask us to see, correct or delete your data at any time. Read the full notice

How we handle your data
What we collect
Name, work email, organisation, role, phone (if given), what you write and any file you upload.
Why
To reply to you and arrange the work you asked about. Nothing else unless you tick the Review box.
Who sees it
strategy1 staff handling your request. Our service providers, such as hosting and AI model providers, acting for us under contract. We do not sell your data.
Where
Some processing, including AI processing, may happen outside India.
How long
12 months after our last contact. Then it is deleted.
Your rights
Access, correction, completion, erasure, nomination, and withdrawal of consent, as easily as you gave it.
Withdraw or complain
Contact our grievance officer, Hariharan, at hariharan@elan1.ai or through the privacy request form on our Privacy and DPDP page. If you are not satisfied, you may complain to the Data Protection Board of India.
Language
This notice is available in English.

Trust

AI use

People make the decisions. The model explains.

Bring one real decision.Leave with a signed plan.

A 72-Hour Bootcamp takes one problem your team would scope in weeks and works it to a decision memo your leadership signs. Fixed scope, fixed fee.

Book a 72-Hour BootcampSend an RFP