Your data is a business asset, not a product.

Ductio explicitly disclaims any right to use proprietary data, workflow logs, or document content to train or improve generalized AI models. Where model providers are used, the approved provider, account type, and data settings should be documented in the project scope.

Every automation delivered for a client is intended to remain under that client's control. This includes workflow logic, prompts, custom code, documentation, and data generated by the system, subject to the signed agreement.

Ductio advocates for encrypted secrets management, least-privilege API keys, client-owned accounts where practical, and credentials that can be revoked at any time. Passwords and API keys should never be sent through the public form.

The Deterministic First approach keeps risky financial, operational, client-facing, or ambiguous decisions behind explicit approval gates. AI can assist, summarize, classify, or draft, but sensitive actions need human accountability.

Enquiry data submitted through this site is used to evaluate project fit, respond to the request, prepare a discovery conversation, and keep a record of the commercial conversation. It is not sold, rented, or traded with third parties.

During discovery and build phases, Ductio prefers masked, sampled, or anonymized datasets. Production data access should be restricted to the minimum required for validation, monitoring, and agreed operational use.