Sign in
Security & privacy

Privacy-first by architecture. Evidence-gated learning.

XpertIntel was designed so your DPO doesn’t have to ask questions. Consent, hashing and governed model authority are architectural concerns, not optional settings.

Consent at the row level

  • Every event carries three explicit flags: consent_analytics, consent_cross_product, consent_model_training.
  • Destinations declare which consents they require; rows without them are dropped at dispatch, not later.
  • Any authorised federated-learning input must carry consent_model_training = true.

Server-side, hashed

  • Customer identifiers are SHA-256-hashed inside the worker before any external call.
  • All ad-platform dispatch is server-to-server (sGTM-ready), so no raw PII in the browser pipeline.
  • Webhook deliveries are HMAC-signed; receivers verify before processing.

Federated learning

  • The architecture keeps local training data within each venture and shares weight updates, not raw rows.
  • Production rounds, participation and improvement require evidence from the Railway-deployed runtime.
  • Raw events never cross venture boundaries.
  • Production model authority is gated by outcome quality and measured out-of-sample improvement; current scoring uses deterministic heuristic LQS.

Access control

  • Postgres Row-Level Security on every table; user roles in a separate user_roles table (no role escalation via profile updates).
  • Admin-only RPCs for anything that aggregates across ventures.
  • Public API keys are hashed at rest with a stable prefix for traceability.

Proof Layer

  • Every shareable artefact is a signed, time-limited URL with a revocation token.
  • PDF exports can include the evidence context used at generation time.
  • Evidence can be audited against event logs and deterministic session scores.

Operational posture

  • Edge runtime deployment; no long-lived secrets in the browser bundle.
  • Secrets stored in managed Cloud, rotated independently of code.
  • Audit RPCs (get_roadmap_audit) expose live system state to admins, not synthetic claims.

See the framework run live.

Twenty minutes. We’ll show deterministic signal scoring, governed routing and the Proof artefact format. No deck.

See the signed Proof artefact format before you talk to us.