Trust model
Security and tenancy
Keep governance records isolated, attributable, and region-aware.
Tenant isolation
Every read and write is scoped through organization membership and role permissions. Collector credentials are tenant-bound.
Regional and retention controls
Telemetry sources declare region, retention, and metadata-only settings. Sensitive content requires explicit source-level opt-in.
Auditability
Writes, downloads, exports, approvals, policy decisions, enforcement actions, and role changes create append-only audit events.
Aegis provides governance and security decision support, not legal certification. Confirm applicability and exceptions with accountable human reviewers.