Privacy Policy

Effective Date: June 18, 2026  ·  Last Updated: June 18, 2026

This Privacy Policy describes how Decisive Edge LLC ("LastKnown," "we," "us," or "our") collects, uses, and protects information in connection with our incident decision support platform available at app.lastknown.ai and lastknown.ai (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account Information: When you create an account, we collect your email address. We use AWS Cognito for authentication — we do not store passwords. Authentication is handled via one-time passcode sent to your email.

Incident Data: Information you enter into the Service during incident response, including incident descriptions, situational updates, actions taken, contacts notified, and compliance flags. This data is entered by your organization's operators and belongs to your organization.

Usage Data: We collect logs of actions taken within the Service, including timestamps of operator actions, for the purpose of building the automatic incident report and for platform security and audit purposes.

Device and Technical Data: Standard technical information including IP address, browser type, device type, and operating system, collected automatically when you use the Service.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Generate Immediate Action Plans using AI processing
• Build automatic incident documentation records
• Authenticate users and maintain account security
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Respond to support requests

We do not use your incident data to train AI models. Incident descriptions are transmitted to Anthropic's API for real-time processing and are not retained by Anthropic after the API call completes, per Anthropic's API terms.

3. AI Processing

The Service uses two external AI services to generate action plans and surface similar incidents:

Anthropic Claude: Incident descriptions, matched emergency response plan content, and historical incident context are transmitted to Anthropic's API to generate Immediate Action Plans and incident narrative summaries. Data is processed in real time and not retained by Anthropic after the API call completes. Anthropic does not use API-submitted data to train its models.

Voyage AI: Incident descriptions are transmitted to Voyage AI's API to generate text embeddings used for semantic similarity search. Data is processed in real time and not retained by Voyage AI after the API call completes.

All AI processing is inference-only. Your data is never used to improve or train any AI model.

4. Data Storage and Security

Infrastructure: All data is stored on Amazon Web Services (AWS) infrastructure in the United States (us-east-1 region). We do not transfer data outside the United States.

Encryption: All data is encrypted at rest using AES-256 with AWS Key Management Service (KMS). All data in transit is encrypted using TLS 1.3.

Tenant Isolation: Each organization's data is stored in a completely isolated database schema with row-level security enforced at the database layer. Your data is not accessible to any other organization using the Service.

Audit Logging: We maintain an immutable audit log of all system activity. AWS CloudTrail logs all AWS infrastructure activity. These logs are available to your organization's administrators upon request.

Access Controls: Access to your organization's data requires authentication. LastKnown personnel access to customer data requires your written authorization and is logged in the audit trail.

5. Data Sharing

We do not sell your data. We do not share your data with third parties for marketing purposes. We share data only in the following circumstances:

• Service providers: AWS (infrastructure), Anthropic (AI processing), Voyage AI (embeddings), Sentry (error monitoring). Each is bound by appropriate data processing terms.
• Legal requirements: We may disclose data if required by law, court order, or government authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, customer data may be transferred as part of that transaction with appropriate notice.

6. Data Retention

We retain your organization's data for as long as your account is active or as needed to provide the Service. Upon termination of your account or written request, we will export your data in a standard portable format within 30 days and delete all copies within 30 days of confirmed export. Deletion will be confirmed to you in writing.

Audit logs may be retained for up to 7 years for legal and compliance purposes.

7. Your Rights

You have the right to:

• Access the data your organization has stored in the Service
• Request a complete export of your organization's data
• Request deletion of your organization's data
• Request correction of inaccurate data
• Receive notification within 72 hours of any security incident affecting your data

To exercise these rights, contact us at privacy@lastknown.ai or support@lastknown.ai.

8. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately.

9. Security Incident Notification

In the event of a security incident affecting your organization's data, we will notify your designated contact within 72 hours of becoming aware of the incident. Notification will include the nature of the incident, data affected, steps taken, and recommended actions.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by posting the updated policy on this page with a new effective date. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or to exercise your rights:

• Email: privacy@lastknown.ai
• Support: support@lastknown.ai
• Company: Decisive Edge LLC