Security & Compliance

Security at a glance

• Encryption: TLS 1.2 or higher in transit (TLS 1.3 where supported), AES-256 at rest, secrets and sign-in keys in Azure Key Vault.
• Hosting: Microsoft Azure, with defense-in-depth and least-privilege access.
• AI & your data: AI features run on Azure OpenAI inside Logic Intelligence®'s own tenant — customer data is never used to train models.
• Compliance posture: GDPR/CCPA-ready data handling.
• Payments: no card details are stored — advances and milestones are invoiced.
• Vulnerabilities: report to info@logicintelligence.com with the subject "Security".

Last updated: August 1, 2026 · Applies to the Data Arcade marketplace and services operated by Logic Intelligence, LLC

Data Arcade is an assumed business name of Logic Intelligence, LLC — a data & AI consultancy with 25+ years of enterprise delivery. Security and privacy are designed into the marketplace, the client portal, and every engagement delivered through it. This page summarizes our security program and compliance posture. For a specific engagement, the signed Consulting Services Agreement (MSA + SOW) and any Data Processing Addendum (DPA) govern.

1. Our security approach

We follow a defense-in-depth model built on the principle of least privilege: every system, person, and delivery partner gets only the access they need, for only as long as they need it. The platform is hosted on Microsoft Azure and inherits Azure's physical, network, and platform security controls, layered with our own application and operational safeguards. Security is a continuous practice — reviewed as the product and each project evolve, not a one-time checkbox.

2. Data protection & encryption

• In transit: every connection to Data Arcade uses HTTPS with TLS 1.2 or higher, and TLS 1.3 where your browser supports it. Older protocols (TLS 1.0 and 1.1) are refused, and browsers are told to use HTTPS only.
• At rest: your data is stored in Microsoft Azure in the United States and encrypted at rest with AES-256, including database backups. Application secrets and the keys that protect your sign-in are kept in Azure Key Vault.
• Secrets management: API keys, tokens and other application secrets are held in Azure Key Vault — never committed to source code or shipped in configuration files.
• Customer source credentials: credentials you share for a project are kept in Azure Key Vault (or your own vault), never in email or chat, and are removed when the engagement ends.
• Partners: Data Circuit plan payments are processed by Stripe, and e-signatures by eSignatures.com, over encrypted connections and under their own security programs.
• On your device: information your browser keeps for convenience — a copy of your profile, your cart, drafts and quotes — stays on your device and is cleared when you sign out or another account signs in on that browser.

3. Identity & access management

• Account security: marketplace accounts use email/password authentication with enforced password strength and automatic lockout after repeated failed attempts.
• Role-based access: the portal separates personas (customer, administrator, account manager, delivery/marketing/ISV partner). Every data endpoint re-checks the caller's identity and scope on the server — access controls are never enforced by the browser alone.
• Internal access: Logic Intelligence® staff access is least-privilege, individually attributed, and protected by multi-factor authentication.
• Project clients: when a purchase becomes a delivery project, access to secured project resources is provisioned through Microsoft Entra ID (B2B guest identities), so the right people reach the right resources under managed identity.

4. Application security

• Secure software development lifecycle with peer code review and dependency management.
• Server-side input validation and output encoding to guard against injection and cross-site scripting.
• Rate limiting and input caps on public, anonymous, and AI-backed endpoints to prevent abuse.
• Confidential data (such as partner names and internal pricing) is kept out of public pages by design.

5. Infrastructure, availability & resilience

The platform runs on Microsoft Azure with hardened configuration, activity logging, and monitoring. Managed platforms operated under a maintenance subscription carry a 99.5% monthly availability target and defined support response times — see the Service Level Agreement. Backups and recovery procedures protect against data loss, and business-continuity plans cover major disruptions.

6. Responsible AI & how we handle your data

Data Arcade's AI features — the Data Circuit AI-readiness assessment, the AI-assisted quote generator, and the Koi assistant — are designed to keep your data in-tenant and under your control.

• AI processing runs on Azure OpenAI within Logic Intelligence®'s Azure tenant. Your inputs are not used to train foundation models.
• AI is used to pre-fill and assist, never to make the final call: quote pricing and Data Circuit scoring are deterministic — the model proposes, the maths and the person decide.
• Consent & retention: we store an assessment or quote only after you explicitly agree, and you can request deletion of your assessment or quote at any time.
• Uploaded requirements documents and descriptions are kept private to you and your assigned Logic Intelligence® Account Manager, and used only to prepare your quote or roadmap.

7. Payments & commerce

Data Arcade does not process or store payment-card numbers. Quotes are non-binding until both parties sign the Consulting Services Agreement electronically. A 25% advance is invoiced at signing and paid before kickoff; each later milestone is invoiced once you approve it, all on Net 15 terms. This keeps financial risk transparent and under your control.

8. Delivery-partner security

Projects are architected and governed by Logic Intelligence® and executed by vetted delivery partners. Partners are onboarded through a formal vetting process that includes NDAs, background checks, and insurance and security attestations. Partner access to your environment is scoped, least-privilege, and time-boxed to the engagement, and all delivery work reports to the Logic Intelligence® project team.

• Under contract with us. Every delivery partner works under a Master Services Agreement and a non-disclosure agreement with Logic Intelligence, LLC (Data Arcade is its assumed business name), with confidentiality terms at least as protective as your Consulting Services Agreement and Mutual NDA. We remain responsible for their work.
• Return or destruction. Within 30 days after a project ends, or sooner if you ask, your confidential materials are returned or securely destroyed by our team and our delivery partners, and we confirm it in writing on request.
• Ownership. Once a milestone is paid in full, what was built for you in it — including custom code — is yours, apart from background technology agreed in the Statement of Work, which you may keep using as part of the deliverable.
• Confirmation before work begins. You can require written confirmation that every delivery partner on your project has accepted these confidentiality terms — an “NDA accepted” milestone in the Statement of Work, or a written confirmation under the Master Services Agreement.

9. Compliance posture

• Privacy regulations: our data handling is designed to support GDPR and CCPA/CPRA obligations, including data-subject requests and, where required, Data Processing Addenda.
• Data residency: Azure regions can be selected to meet residency requirements for a given engagement.
• Company credentials: Logic Intelligence® is a certified MBE/DBE and an NMSDC member.
• Security questionnaires, our latest posture summary, and applicable certifications are available on request — contact us.

10. Privacy & your data rights

How we collect, use, and share personal data — and how to exercise your rights (access, correction, deletion) — is described in our Privacy Policy. Data-subject requests can be sent to the contact below.

11. Incident response & breach notification

We monitor for security events and maintain a defined incident-response process. In the event of a confirmed security incident affecting your data, we will notify affected customers promptly and in line with applicable law and contractual commitments, and work with you through containment and remediation.

12. Reporting a vulnerability

We welcome responsible disclosure. If you believe you've found a security issue in Data Arcade, please email info@logicintelligence.com with the subject line "Security" and enough detail for us to reproduce it. Please give us reasonable time to investigate and remediate before any public disclosure, and avoid accessing or modifying other customers' data during testing.