Phronesis Executive Intelligence
Trust Center
How Phronesis protects your data. Last updated July 2026.
Data Location and Hosting
Phronesis runs entirely in the United States. The application is hosted on Vercel. The database and all uploaded files are stored in Supabase, which runs on Amazon Web Services in the United States. The exact hosting region is available under a non disclosure agreement.
Encryption
Traffic is encrypted in transit with Transport Layer Security 1.2 or higher. Data is encrypted at rest with strong encryption at the database and storage layer.
Tenancy and Isolation
The platform is multi tenant with row level security on every table that holds user data, scoped to the account. Every request verifies the authenticated session and confines each read, write, and delete to that account, so no account can reach another's data.
Access
Administrative and standard roles are separated. Access is authenticated on every request. Administrative access to the infrastructure consoles uses multi factor authentication. Every request is logged with its timestamp, model, and cost.
Artificial Intelligence and Training
All reasoning runs through the Phronesis Intelligence API. Customer inputs and outputs are never used to train any model, and the underlying providers are contractually barred from training on customer data.
Backups
The database is backed up automatically twice a day to two independent locations, and a restore is tested on a schedule.
Certifications
Aeternum is pursuing SOC 2 Type 2, ISO/IEC 27001, and ISO/IEC 42001. The underlying cloud providers maintain their own SOC 2 and related certifications for the infrastructure layer.
Subprocessors and Regulated Data
Phronesis relies on the subprocessors in the Public Subprocessor List below. Users are asked not to upload regulated data, in particular protected health information, until the corresponding certification is in place.
Privacy and Retention
Account and conversation data is retained while the account is active and removed within thirty days of cancellation. Uploaded files are deleted on request. Request and usage logs are retained for ninety days. Phronesis is intended for United States based users at launch. Generated videos are stored on a public link so that saved videos remain playable, so please do not put anything private into a generated video.
Security Inquiries
For non disclosure gated materials, the complete subprocessor list, the exact hosting region, or any security review question, contact cjm@aeternumsystems.com.
Public Subprocessor List
These are the third parties that help run Phronesis. Each operates in the United States and is bound by terms that prohibit training on customer data. The complete detail is available under a non disclosure agreement.