LastKnown
WHERE RESPONSE BEGINS

Privacy Policy

Effective Date: August 1, 2026 · Decisive Edge LLC

LastKnown is a B2B platform serving security operations teams. We do not sell personal data. All incident data belongs to your organization.

1. Who We Are

Decisive Edge LLC ("Company", "we", "us") operates the LastKnown platform at lastknown.ai and app.lastknown.ai. We provide AI-powered incident decision support for physical security operations teams at hospitals, law enforcement agencies, corporate security operations centers, educational institutions, and faith communities.

2. Information We Collect

Account Information: Name, email address, and organizational role when your administrator provisions your account.

Incident Data: Descriptions of security incidents, action plan interactions, situational updates, and contact notification records entered during platform use. This data belongs to your organization.

Usage Data: Log data including actions taken, features used, timestamps, and session information for security audit and platform improvement purposes.

Device Information: Browser type, operating system, and IP address for security monitoring purposes.

3. How We Use Your Information

We use collected information solely to:

· Provide and operate the LastKnown platform for your organization
· Generate AI-powered incident action plans and recommendations
· Maintain security audit logs as required by applicable law
· Send transactional communications (OTP codes, account notifications)
· Improve platform reliability, security, and performance
· Comply with legal obligations

We do not use your incident data to train AI models. We do not sell your data to third parties. We do not use your data for advertising.

4. AI Processing

Incident descriptions entered into LastKnown are processed by Anthropic PBC (Claude AI) to generate action plans. Anthropic processes this data on our behalf under data processing agreements and does not retain your data after processing or use it to train their models.

Incident descriptions are also processed by Voyage AI for similarity search functionality, under equivalent data processing protections.

5. Data Storage and Security

All data is stored in the United States (AWS us-east-1 region) and never transferred internationally without your consent.

We implement the following security measures:

· Encryption at rest using AES-256 via AWS KMS
· Encryption in transit using TLS 1.3
· Multi-tenant data isolation — your organization's data is logically separated from all other tenants
· Role-based access controls
· Immutable audit logging of all data access
· AWS WAF and DDoS protection
· Regular security reviews

6. HIPAA

Decisive Edge LLC maintains an active HIPAA Business Associate Agreement with AWS. Organizations subject to HIPAA must execute a Business Associate Agreement and Data Processing Agreement with Decisive Edge LLC before using the Service with protected health information. Contact legal@lastknown.ai to obtain these agreements.

7. Data Retention

Incident data is retained for the duration of your service agreement and for thirty (30) days following termination. Upon written request, we will delete or return all organizational data within thirty (30) days. Audit logs may be retained longer as required by applicable law.

8. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data. To exercise these rights, contact privacy@lastknown.ai. We will respond within thirty (30) days.

9. Cookies

We use only essential cookies necessary for authentication and platform operation. We do not use tracking, advertising, or analytics cookies.

10. Third-Party Services

We use the following third-party services to operate the platform:

· AWS — cloud infrastructure, database, storage (HIPAA BAA active)
· Anthropic — AI language model processing
· Voyage AI — vector embedding for similarity search
· Twilio SendGrid — transactional email delivery
· Cloudflare — DDoS protection and DNS
· Sentry — error monitoring

11. Changes to This Policy

We will notify you of material changes to this Privacy Policy via email or prominent notice on the platform at least thirty (30) days before changes take effect.

12. Contact

For privacy questions, data requests, or to obtain a Business Associate Agreement:

Decisive Edge LLC
privacy@lastknown.ai
lastknown.ai