Governance & Trust
Privacy Policy
Effective Date: January 1, 2026 · Last Updated: September 2026 · CyberPosture LLC
1. Executive Commitment
CyberPosture LLC (“CyberPosture”, “we”, “our”, or “us”) provides the RAMP (Readiness Assessment Measurement Protocol) platform. We respect your privacy and are committed to protecting the confidentiality, integrity, and availability of personal and organizational data entrusted to us.
This Privacy Policy outlines our practices regarding data collection, processing, protection, and your individual rights under applicable privacy laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and related global standards.
2. Information We Collect
A. Inquiries & Communications
When you contact us, request a product walkthrough, or submit inquiries via our platform forms, we collect your name, corporate email address, phone number, company name, and message contents. These submissions are routed directly to our designated security and compliance desk.
B. RAMP Assessment & Control Metadata
For enterprise customers utilizing RAMP, our platform processes business process control metadata, policy documentation, technological asset inventory (e.g., cloud environment configurations), risk register items, and AI model governance manifests. Customer data is processed strictly to perform gap assessments, test control design, quantify financial exposure, and generate audit-ready workpapers.
C. AI Model & System Metadata
When evaluating frontier AI risk under NIST AI RMF and ISO 42001, RAMP processes algorithmic metadata, model governance configurations, and security guardrail settings. Customer prompts and configurations are never retained or used to train AI models.
3. How We Use Information
- To deliver, maintain, and enhance the RAMP platform and audit readiness assessments.
- To respond to enterprise inquiries, schedule product walkthroughs, and provide customer support.
- To perform quantitative financial risk modeling ($VaR) and compile regulatory workpapers.
- To comply with statutory legal, auditing, and regulatory obligations.
- To safeguard against security incidents, fraudulent behavior, and unauthorized platform access.
We never sell, rent, or trade your personal information or enterprise assessment data to third parties.
4. Cookies & Tracking Technologies
We use cookies and similar technologies strictly for essential platform functionality, authentication session integrity, and anonymous aggregated usage analytics. You may manage your cookie preferences at any time through our on-site cookie banner or by configuring your web browser settings.
5. Data Security & Encryption
CyberPosture implements enterprise-grade technical and organizational safeguards. All data in transit is encrypted using Transport Layer Security (TLS 1.3), and all stored customer data is encrypted at rest using AES-256 standards. Access is restricted according to the principle of least privilege (PoLP) and role-based access controls (RBAC).
6. Your Privacy Rights
Depending on your geographic jurisdiction, you hold statutory rights regarding your personal data, including the right to request access, rectification, portability, or deletion of your records. To exercise any of these rights, please submit a request to our security and privacy team via our contact form.
7. Contact Our Privacy Office
For questions, concerns, or requests regarding this Privacy Policy or our security practices, contact us:
CyberPosture LLC · Privacy & Data Governance
Inquiries & Data Subject Requests: Submit via Secure Contact Formarrow_forward