KrisVenPrivacy Policy
This policy explains what personal information KrisVen collects, why, how long we keep it and who we share it with. It covers the krisven.ai website, the KrisVen service (including KrisVen Studio and the KrisVen APIs and MCP tools) and the KrisVen connector for Claude.
Last updated: 28 October 2026
Who we are
KrisVen ("KrisVen", "we", "us") provides governed memory and decision evidence for AI agents and the people who work with them. For information you give us on krisven.ai, we decide how it is used. For information an organization loads into the KrisVen service, that organization decides how it is used, and we process it on the organization's behalf under our agreement with them.
We do not sell personal information, and we do not use customer data to train AI models.
krisven.ai website
| What | When | Why |
|---|---|---|
| Name, work email, phone number, organization and what you tell us about your workflow | You send the "Discuss my workflow" or sandbox request form | To reply to you and prepare a call |
| Work email and your AI Decision Trust Score answers and results | You ask for your score report | To email the report to you and follow up about it |
| Name, email and the time you choose | You book a call through the embedded calendar | To schedule the call |
| IP address and browser details | Every page visit, as part of normal web requests | To deliver the site and keep it secure |
The AI Decision Trust Score is calculated in your browser. Your answers leave your browser only when you ask for a report or send a form. The site does not use advertising or analytics cookies.
KrisVen service
When your organization uses KrisVen, we process:
- Account information: names, work email addresses, roles and sign-in records for the people your organization invites.
- Customer content: the knowledge, policies and precedents your organization loads and approves, drafts saved by people or agents, and sealed decision records. Sealing stores SHA-256 fingerprints, short summaries and source references of documents, not the documents themselves.
- Usage and billing records: counts of operations per tool and organization, and, when you subscribe through AWS Marketplace, the subscription identifiers AWS gives us.
- Operational logs: identifiers, the action taken, its outcome and timing, used for security and reliability.
Each organization's data is kept separate from every other organization's at the database level. We use customer content only to provide the service to that organization.
KrisVen connector for Claude
The connector lets Claude, acting for a signed-in KrisVen user, call four KrisVen tools: Read, Write, Seal and Verify.
| Data | Source | Purpose |
|---|---|---|
| Organization ID, work email and password at sign-in | You, on KrisVen's own sign-in page | To confirm who you are. KrisVen checks the password and does not share it with Anthropic. The connector does not store it. |
| Connection record: your user and organization, the Claude client, the tools you approved and when | Created when you approve the connection | To authorize later calls and let you or your administrator end the connection |
| Sign-in codes and refresh tokens | Created by KrisVen | To keep you signed in. Only one-way SHA-256 digests are stored. |
| Tool inputs: case ID, purpose, query, draft text, decision details, document fingerprints and summaries | Sent by Claude when it calls a tool | To carry out the request in your organization |
| Usage counts per tool | Recorded by KrisVen | Billing to your organization's plan or its linked AWS Marketplace subscription |
The connector does not request or receive your Claude conversation history, the files you share with Claude or Claude's memory. It receives only the inputs Claude sends with each tool call. What Claude does with tool results is governed by your agreement with Anthropic.
Who we share it with
We share personal information only with the service providers that run KrisVen for us, and only for that purpose:
- Amazon Web Services: hosting for the KrisVen service and the Claude connector (United States, us-west-2 region). AWS Marketplace receives usage counts when your organization is billed through it.
- Vercel and Cloudflare: hosting and DNS for krisven.ai.
- Formspree: receives website form submissions and forwards them to us by email.
- IONOS: our email provider, which sends score reports and our replies.
- Calendly: scheduling, when you book a call.
- Google Fonts: serves the fonts on krisven.ai, which means your browser requests them from Google.
- Anthropic: when you use the Claude connector, Claude sends tool requests to KrisVen and receives the results.
We may also disclose information when the law requires it, or to protect the security of KrisVen and its users.
How long we keep it
| Data | Kept for |
|---|---|
| Website form submissions and score reports | As long as needed to follow up on your request, or until you ask us to delete them |
| Connector sign-in codes | Single use, expire after 60 seconds |
| Connector access tokens | Not stored; expire after 15 minutes |
| Connector refresh tokens | Valid 30 days from last use and at most 90 days per sign-in. Ended tokens are kept only as one-way digests. |
| Connector connection records | Until the connection ends or the organization's account is closed |
| Customer content and usage records | For the term of your organization's agreement and its retention settings |
| Connector service logs | One month |
Security
Data is encrypted in transit with TLS and at rest. Sign-in uses OAuth 2.0 with PKCE. Every action is checked against the person's own KrisVen permissions. Sealed decision records are signed with Ed25519, so changes can be detected. No system is perfectly secure; if we learn of a breach that affects your information, we will tell you as the law requires.
Your choices and rights
- Disconnect KrisVen in Claude's connector settings at any time. KrisVen administrators can turn the connector off for their whole organization, or limit its tools, in KrisVen Studio.
- Ask us for a copy of your personal information, or ask us to correct or delete it, by emailing contact@krisven.ai. If your information is in an organization's KrisVen workspace, we will work with that organization on your request.
- Depending on where you live, you may have further rights under local law, including the right to complain to a data protection authority.
KrisVen is a business service and is not directed to children.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change is significant, we will also tell customer administrators directly.
Contact
Questions about this policy or your information: contact@krisven.ai.