Where company data is held.

kn0w makes the Automation Report from company data. Data that identifies a company is held in the region where it was collected. The peer data holds anonymised data only. One anonymisation step crosses between the two.

ap-southeast-2 · eu-west-2
Sydney and London regional boundaries
k=5
Anonymisation floor from the first report
One crossing
The anonymisation step is the only permitted crossing point

What is held and what is pursued.

The controls on this page are live. SOC 2 Type II and ISO 27001 are being pursued and are not yet held.

✓Regional data boundariesIn-region storage and reasoning, Sydney and London.Live
✓Anonymisation stepThe only permitted crossing point.Live
✓ControlsEncryption, least-privilege access, append-only event record, infrastructure defined in code.Live
◯SOC 2 Type IIPursuing. Not yet held.Pursuing
◯ISO 27001Pursuing. Not yet held.Pursuing

When a certification is granted, this page carries it.

Four controls.

The same controls run in every region and for every company.

Encryption
At rest and in transit
Data is encrypted in storage and on every connection.
Access
Least privilege
Access to infrastructure is scoped to the minimum each service needs.
Event record
Append-only
Every state change is written as a new row. No record is updated or deleted.
Infrastructure
Defined in code
Infrastructure is defined in code.

Held where it was collected.

Identifiable data is held inside AWS regional boundaries: Sydney (ap-southeast-2) for Australian companies, London (eu-west-2) for United Kingdom companies. It does not cross those boundaries.

kn0w's AI processing takes place within the company's home region. Readings, narrative and the report draft are produced within that region. No identifiable data is sent to a model endpoint outside it.

The peer data holds no identity.

The peer data is a separate store in the United States (AWS us-east-1). It holds anonymised data only. Identifiable data is never part of it.

In-region anonymisation before crossingEach region, Sydney and London, anonymises within its own boundary. Identifiable data never leaves its home region. Only anonymised data crosses, through a single step, into the US peer data store, which holds no identity and operates at a k=5 floor.ap-southeast-2 · Sydney · home regionCompany dataAustralian companiesAnonymisestrips identity · k=5eu-west-2 · London · home regionCompany dataUK companiesAnonymisestrips identity · k=5us-east-1Peer dataanonymisedk=5 floorAnonymisation completes inside each home region. Identifiable data never crosses the boundary.

Anonymisation completes inside the home region before anything crosses. A company's anonymised contribution joins the peer data after its report is issued. No placement is read from fewer than five companies.

Benchmark: how a company is placed

Fixed retention.

Each voice session is recorded to produce the readings.

Identifiable data
Relationship + 12 months
Held for the life of the relationship and for 12 months after it ends, then deleted.
Session audio
30 days
Each recorded session is deleted within 30 days of the session date.
Peer data
Retained
It carries no identity to delete.

Named entities, instructed access.

KN0W PTE. LTD. (Singapore, UEN 202615303G) is the data controller and the contracting party on every commission. kn0w LLC (Wyoming) is the technical sub-processor and operates the infrastructure under instruction from Singapore. Both are named in the Data Contribution Agreement, which is executed before any session opens.

US CLOUD Actkn0w LLC is a United States entity and may be subject to the US CLOUD Act. kn0w acknowledges that the Act applies. It is addressed in the Sub-Processor Agreement between KN0W PTE. LTD. and kn0w LLC, and disclosed in the Data Contribution Agreement. Both are available on request.

The documents behind the page.

This page states what the architecture does. The legal basis is at /privacy. The contractual terms are at /terms. For legal, risk and procurement review, the underlying documents are available on request.

Data handling
Data Contribution Agreement
The agreement governing every commission. Available on request.
Sub-processor
Sub-Processor Agreement
KN0W PTE. LTD. to kn0w LLC, naming the infrastructure operator. Available on request.
Contact
Security review
Direct a security or data-handling question to security@kn0w.co.

Where company data is held.

Report 000142, a sample report for a fictional company. kn0w Score 51, Systematic.

See a Report