Trust Center

1. Anthropic, PBC (United States)

Purpose: AI-assisted analysis and productivity tooling used by our team in delivering services. Anthropic provides the Claude family of AI models under commercial terms that include a Data Processing Addendum with Standard Contractual Clauses for international transfers.

Data handling commitments relevant to your data:

• No model training. Anthropic does not use commercial customer data to train its AI models. Data we submit is processed solely to provide the service to us.
• Limited retention. Inputs and outputs are retained only for a limited operational period and are then deleted. Content flagged by automated safety systems for potential misuse may be retained for a longer period for trust-and-safety review. Data is not retained for model development.
• Infrastructure. Anthropic's services are hosted on Amazon Web Services and Google Cloud Platform, which act as sub-subprocessors, in United States regions. Anthropic maintains SOC 2 Type II and ISO 27001 certifications.

2. Salesforce, Inc. (United States)

Purpose: Salesforce provides our customer relationship management (CRM) platform, where we maintain client contact details and engagement records, and Slack, which we use for business communications and collaboration, including communications that may reference client engagements. Salesforce processes this data under its Data Processing Addendum, which includes Standard Contractual Clauses, and maintains SOC 2 Type II and ISO 27001 certifications.

3. Microsoft Copilot

Microsoft Copilot protects user data by adhering to strict enterprise privacy standards, inheriting existing access permissions, and refusing to use organizational prompts or responses to train foundation models.

• No Model Training: Your prompts, responses, and data accessed via Microsoft Graph are never used to train foundational AI models.
• Permission Inheritance: Copilot respects your existing user identity model, access controls, and administrative settings from Microsoft Entra ID.
• Data Encryption: Service-side technologies secure organizational data both at rest and in transit using Transport Layer Security (TLS).
• Compliance Standards: The platform complies with regional and international frameworks including GDPR, the EU Data Boundary, and ISO/IEC 27018.

Your Right to Object

If you have questions or concerns about either subprocessor, please contact us within 30 days of this notice at security@infiniteequity.com. If you object, we will work with you in good faith to address your concerns, including discussing alternative arrangements for your data before either subprocessor processes it.

If we do not hear from you within the notice period, the engagement of these subprocessors will proceed in accordance with our agreement.

No action is required if you have no objection.

An updated list of our subprocessors is maintained at https://trust.infiniteequity.com/.

As always, thank you for your continued trust. Please reach out with any questions.