Privacy statement
Last updated 22 July 2026 · Scalarion is operated by Cognita GRC.
We built Scalarion to be honest about governance; we hold ourselves to the same standard about your data. This is a plain-language description of what we actually collect and why.
What we collect
- Account — when you sign in, our authentication provider (Clerk) gives us your email and name. We do not store your password.
- What you build — the agent descriptions, tool manifests, and workflow audits you enter, and the assessments, evals, and Evidence Packs derived from them.
- Billing — handled by Stripe. We never see or store your full card number; we keep a customer reference and your plan.
- The ledger — when you seal a run, we store a tamper-evident hash chain of that run for verifiability. It records that a run happened and its outcome, not your customers’ data.
- Usage — basic product-analytics events (e.g. “described an agent”, “sealed a run”) to understand and improve the funnel.
Building is anonymous
You can describe, preview-run, assess, and evaluate an agent without signing in. In-progress work lives in your browser (localStorage) until you choose to save it. We only associate work with you once you sign in to keep it.
Who processes your data
We use a small set of sub-processors to run the service: Clerk (authentication), Stripe (billing), Anthropic (the language model that reads your agent descriptions to draft and assess them), Railway (hosting), and Resend (transactional email). We do not sell your data or share it for advertising.
Evidence Packs are private by default
Compiling an Evidence Pack seals it to your workspace but does not make it public. A pack becomes a public, no-login verification link — and eligible for search indexing — only when you explicitly publish it, and you can make it private again at any time.
Retention & your choices
We keep your account and saved agents while your account is active. You can delete a saved agent from your workspace; deletion removes it from your account. To close your account or request a copy or deletion of your data, contact us at [email protected].
Contact
Questions about privacy: [email protected].