Glass Box · How we handle your data

Paranoid about your data? Good. So are we.

We keep your data in one sealed workspace for as long as we work together, never delete it on a timer, and when it is deleted we prove it is gone. Scroll to follow one file through its whole life with us, then fingerprint a file of your own without it ever leaving your computer.

Follow a file Fingerprint a file Carry competing tool lines?

Inspection report · client data handling

Rev 1.4

Our data-handling commitments and where each is written
FeatureSpecWritten in
Client data heldDuring the agreementCSA Sched. A · SP 1.9
Deletion after the agreement ends or you ask≤ 30 daysCSA Sched. A · SP 1.9
Automatic deletion of your dataNeverCSA Sched. A · SP 1.9
Signed certificate of deletion≤ 5 business daysCSA Sched. A, B · SP 1.9
Incident notice to you≤ 48 hoursCSA Sched. A · SP 2.5
AI training on your dataNoneCSA Sched. A · SP 1.7
Writes to your ERPNoneCSA Sched. A · SP 1.4

SP = our adopted Information Security Program, v1.4. CSA = our Client Services Agreement, Form CSA-1.1, adopted Oct 16, 2026.

One file · 7 stages

Follow one file from the day you send it to the day we prove it is gone.

Weeks, not years. A file that exists in fewer places, for less time, is a file that is harder to lose.

  1. 00 Before

    Email a price file and it multiplies.

    Attached to an email, a price file can end up in sent folders, forwarded threads, phones and backups nobody can list. You cannot delete copies you cannot find.

    So we never take client data that way. Here is the path your file takes with us instead.

    Written in: Why SP 1.6 bans email attachments

  2. 01 Receive

    Received read-only. Never by email.

    You send an export, or create a read-only login you can switch off at any time. Files move on a sharing link restricted to named people that expires, or through your own secure file transfer. We ask only for the columns the work needs.

    We never write to your ERP. Every change comes back as an import file your own staff review and load.

    Written in: SP 1.4, 1.6 · CSA Schedule A

  3. 02 Isolate

    One client. One sealed workspace.

    Your data lives only in a dedicated, access-restricted workspace for your company inside our Microsoft 365 tenant in the United States, encrypted at rest and in transit.

    It is handled only on company devices with full-disk encryption, by named people bound by confidentiality, and it is never combined with another client’s data.

    Written in: SP 1.3, 1.5, 1.6 · CSA Schedule A

  4. 03 Analyze

    AI that works on your data and never learns from it.

    AI runs only through our own commercial accounts, under terms that prohibit training models on your data, set to US-only processing. Ask for zero data retention and we run your work on Amazon Bedrock with retention turned off, at no extra charge. Consumer and free AI tools never touch client data.

    A person checks every AI finding against your source data before you see it. Our AI provider account is still in setup, so today no client data goes to AI at all.

    Written in: SP 1.7 · CSA Schedule A · Subprocessor list

  5. 04 Deliver

    Delivered with a fingerprint on every file.

    Cleaned data, import files and reports reach you on a restricted, expiring link. Each file is listed with its size and its SHA-256 fingerprint: a 64-character code that changes completely if even one bit of the file changes.

    You can check that the copy you hold is exactly the copy we sent. Try it on your own file below.

    Fingerprint your own file ↓

    Written in: SP 1.9 · CSA Schedules A and C

  6. 05 Sign

    You sign for it. Your data stays protected.

    You confirm receipt on a signed Acknowledgment of Receipt within 10 business days, or tell us about any missing or unreadable file and we deliver it again. If we hear nothing, we send a written reminder, and receipt is deemed acknowledged 10 business days after it.

    Signing confirms delivery only. It does not start a deletion clock: we keep your data, fully protected, for as long as our agreement is in effect, including quiet months between projects, so the next project starts where the last one ended.

    Written in: SP 1.9 · CSA Schedules A.7 and C

  7. 06 Purge

    Deleted when you say. Every location checked.

    Within 30 days after our agreement ends, or after you ask in writing, we permanently delete your data everywhere it was: the workspace, recycle bins, version history, laptop copies and files in the AI service.

    Nothing is ever deleted by a timer or an automatic process: each deletion is authorized in writing by our Manager, then each location is checked independently to confirm nothing is left. Before deleting, we offer to deliver any completed work.

    • Checked Client workspace
    • Checked Recycle bins
    • Checked Version history
    • Checked Laptop copies
    • Checked AI-service files

    Written in: SP 1.9 · CSA Schedule A.6

  8. 07 Certify

    A signed Certificate of Data Deletion.

    Within 5 business days of the purge you receive a Certificate of Data Deletion signed by our Manager. It lists the data sets, where they were held, how and when they were deleted, and how the deletion was verified.

    We keep only the agreement, invoices, your signed acknowledgments, the certificate and our own work product (methods and rulebooks, confidential to you). Never your data.

    See a sample certificate ↓

    Written in: SP 1.9 · CSA 6.4 · CSA Schedules A.8 and B

Try it · runs on your device

Fingerprint your own file.

Drop any file. Your browser computes its SHA-256 fingerprint right here. This is exactly how we prove delivery: every file we hand over is listed with this code on your Acknowledgment of Receipt, so you can confirm the copy you hold is the copy we sent.

SHA-256 fingerprint

Waiting for a file
File
None yet
Size
—
Fingerprint

RobbJack and your competing lines

Carry competing cutting-tool lines? Your data never reaches RobbJack.

Mike MacArthur has been part of the RobbJack team, a carbide cutting-tool manufacturer, for over thirty years. So here is our promise in plain words, and it is written into every client agreement:

  • Nothing you share goes to RobbJack. Your prices, costs, customers, supplier terms and results are never shared with RobbJack or used in its business. They stay in your own sealed workspace.
  • Nothing from RobbJack comes into your project. We use only general methods, never RobbJack’s data, pricing or customers.
  • We don’t work for RobbJack’s direct competitors. That means companies that make solid carbide end mills, routers or slitting saws. Distributors are never competitors, whatever lines they carry.
  • Want extra certainty? Use Blind Export (below).

In plain English

What we promise, and where it is written.

Each commitment below comes from our adopted Information Security Program. Those marked In the agreement are also written into our Client Services Agreement (Form CSA-1.1), so you can hold us to them. The agreement you sign governs.

  • In the agreement

    We never write to your ERP.

    Read-only access only: a data export, or a read-only login you create and can switch off. Every change comes back as an import file your own staff review and load.

    SP 1.4 · CSA Schedule A

  • In the agreement

    You decide every price.

    We show findings and options. You make every pricing and commercial decision, and each rule we apply is recorded with the decider’s name, the date and their own words. We never set your prices or suggest aligning them with a competitor.

    SP 1.7, 1.8a · CSA 7A

  • In the agreement

    Your data only. No pooling.

    Every analysis uses only your own data and public information. We never pool non-public prices, costs, margins, rebates or terms across clients, never run a pricing tool shared among competing clients that draws on a competitor’s data (California’s “common pricing algorithm” rule, AB 325, in force since January 1, 2026), and offer no competitor benchmarking.

    SP 1.8a · CSA 7A

  • In the agreement

    Never a go-between.

    We never carry prices, terms, bids or plans between competitors. Serving both sides of one rebate or special-pricing agreement takes both parties’ written consent, and we apply its terms as written without advocating for either side.

    SP 1.8a · CSA 7A

  • In the agreement

    A written wall between us and RobbJack.

    Our founder is also part of the RobbJack team, a solid carbide cutting-tool maker. We never share your data with RobbJack or anyone else, and we back that up with a written agreement.

    SP 1.8 · CSA 7A

  • In the agreement

    48-hour incident notice.

    If a security incident touches your data, we notify you immediately after we discover it and in every case within 48 hours: a phone call to your security contact, then the known facts in writing, with updates as they emerge.

    SP 2.5 · CSA Schedule A

  • In the agreement

    No training. US only. Zero retention on request.

    Client data goes only to our own commercial AI accounts, under terms that prohibit training on it, set to US-only processing. Choose zero data retention and your work runs on Amazon Bedrock with retention turned off. Consumer and free AI tools never see it.

    SP 1.7 · CSA Schedule A

  • In the agreement

    Never an email attachment.

    Client data moves only on links restricted to named people that expire, or through your own secure file transfer. It is never attached to an email, in either direction.

    SP 1.3, 1.6 · CSA Schedule A

  • In the agreement

    Data we will not take.

    ITAR or EAR-controlled technical data (other than EAR99), Controlled Unclassified Information, payment-card data, protected health information and government ID numbers stay out unless we both sign an addendum first. If any arrives, we quarantine it, tell you, and delete it.

    SP 1.3 · CSA Schedule A

  • Our commitment

    Insured before we hold anything.

    Technology errors-and-omissions and cyber coverage are bound before we accept any client data.

    Our commitment

Honesty panel

We are not SOC 2 audited.

Here is what we run instead, today:

  • A written Information Security Program built on the CIS Critical Security Controls, Implementation Group 1
  • Multi-factor sign-in on every account that can reach client data
  • A written incident response plan, practiced in a tabletop drill at least once a year
  • Security awareness and phishing training every year
  • A signed Certificate of Data Deletion after every purge
  • Once a year, on request, we answer your security questionnaire in writing

SP 1.4, Part 2, Part 3 · CSA Schedule A (Audit)

How we test AI before it touches your work AI Test Bench: watch a prompt change graded on a fixed test set, and the ship gate stop it when it breaks answers that used to be right. Watch it run

The paperwork you get

Two documents protect every engagement.

You sign the first each time we deliver. We sign the second when your data is deleted. Below are previews of both, filled in for a fictional client.

Sample documents · fictional client

  1. Day 0 Files delivered with fingerprints
  2. Day 6 You sign the acknowledgment
  3. Day 90 Agreement ends (or you ask us to delete)
  4. Day 104 Deletion done, every location checked
  5. Day 107 Certificate signed and sent

Sample dates. The deadlines: you sign within 10 business days of each delivery; we delete within 30 days after the agreement ends or after your written request, never automatically; and the certificate follows within 5 business days of the deletion.

Schedule C · Client Services Agreement

Acknowledgment of Receipt of Deliverables

Precision Tolerance AI LLC ("PTAI") delivered the files below to Meridian Sample Supply (fictional) ("Client") for the engagement Margin Diagnostic (sample) on Day 0. Each file's SHA-256 fingerprint lets Client confirm that the copy it holds matches what PTAI sent exactly.

#FileSize (bytes)SHA-256 fingerprint
1meridian-price-import-RevA.csv1,482,1131ca4af37 7adf13b3 21e69c1d 0c71d042 71abde70 c7be3411 fa3eb8ee d58cdf73
2meridian-cost-update-RevA.csv402,8770eb6ebae bf3495d9 35cc45ea 50c70ae2 cf0296db d1647896 8941b769 d074f4c0
3meridian-findings-report.pdf2,210,554cf652c68 d0245fc9 c42918ff 79e36262 ae081b6e 1ecf385f c3089f0f 69dd1e1b

Client confirms:

  • Client received every file listed above and saved it in Client's own systems.
  • Client opened each file and it is readable. Optional: Client checked the fingerprints and they match.
  • Client understands that this acknowledgment confirms delivery only. PTAI keeps Client Data under the Agreement while the Agreement is in effect, and deletes it within 30 days after the Agreement ends (or after Client's written request), then sends a Certificate of Data Deletion. After that deletion, PTAI cannot provide these files again.

Please sign and return within 10 business days. If PTAI receives no signed copy and no written objection within 10 business days after a written reminder, receipt is deemed acknowledged (Schedule A.7).

Signature, name and title (Client)Sample · not signed

Schedule B · Client Services Agreement

Certificate of Data Deletion

Precision Tolerance AI LLC ("PTAI") certifies to Meridian Sample Supply (fictional) ("Client") as follows, under Schedule A of the Client Services Agreement.

Engagement
Margin Diagnostic (sample)
What started the deletion
Agreement ended (written notice effective Day 90)
Deletion authorized by
PTAI Manager, in writing, Day 91
Data sets received
Price file export and vendor cost export (sample), received at kickoff
Locations where the data was held
Client workspace in PTAI Microsoft 365 (US); PTAI laptop (asset tag); AI-service workspace (when used)
Deletion method
Permanent deletion including recycle bins and version history; AI workspace files deleted; device storage cleared (NIST SP 800-88)
Date deletion completed
Day 104
How deletion was verified
Independent search of each location after deletion returned no Client Data
Subprocessor retention remaining
None
Records PTAI keeps
Agreement, invoices, payment records, the signed Acknowledgments of Receipt, this certificate, and PTAI Work Product (Section 6.4), held as Client's Confidential Information and containing no copy of Client's records

To the best of PTAI's knowledge after the checks above, PTAI no longer holds any Client Data.

Michael MacArthur, Manager, Precision Tolerance AI LLC · Day 107Sample · not signed

Security questions

Ask the person who wrote the policy.

Security questionnaires, a copy of our Information Security Program and the Client Services Agreement (Form CSA-1.1), or a report of something that looks wrong: it all goes straight to our Security Officer.

security@precisiontolerance.ai

(530) 368-7296

Please don't email files containing business data. If we need data, we send you a restricted, expiring link.