AiRockett Motorsport Compliance – Data Ownership, No Training, EU

WHO OWNS THE DATA WE PROVIDE TO AIROCKETT®?

You do—always. AIROCKETT® only processes it to generate your Decision Packs. Data is treated as customer-owned and processed only to deliver the agreed workflows and outputs, under your instructions.

DO YOU USE OUR DATA TO TRAIN MODELS?

No. Inference only—no training, no fine-tuning, no reuse across teams. Inputs/outputs are not used to improve third-party models and are not shared across clients.

WHERE IS THE DATA STORED AND PROCESSED?

EU-first by default, with controlled processing paths. The platform can be deployed in EU regions (e.g., Frankfurt) and any external processing is governed to keep the same guarantees.

WHO CAN ACCESS OUR DATA?

Only named, authorized users—least privilege by design. Role-based and attribute-based access control (RBAC/ABAC) keeps domains, teams, and projects separated.

WHAT SECURITY CONTROLS ARE IN PLACE?

Encryption, segregation, access control, and auditable operations. Encryption in transit/at rest, environment separation, and operational controls designed for high-assurance workflows.

WHAT DO YOU LOG—AND WHY?

Minimal logs for traceability and support, never for training. Limited, secured records may be kept to audit Decision Packs, troubleshoot, and prove what was produced and when.

HOW DO YOU HANDLE DATA QUALITY AND CONSISTENCY?

A quality gate before reasoning—bad inputs get flagged, not “averaged out.” Completeness/coherence checks prevent unreliable datasets from driving outputs.

HOW LONG DO YOU RETAIN DATA AND OUTPUTS?

Time-bound retention, minimized by default. Retention windows are defined and deletion is enforced (including backups) unless you request otherwise.

WHICH THIRD PARTIES ARE INVOLVED?

Only vetted providers—bound to the same rules. Any provider used is governed contractually and technically to preserve confidentiality, access control, and inference-only processing.

WHAT HAPPENS IF THERE’S AN INCIDENT?

You’re informed and supported fast—clear process, clear actions. Incident response includes containment, investigation support, and compliance assistance aligned to applicable data-protection obligations.