Privacy Policy

This Privacy Policy explains how Altiaris, doing business as Korcomptenz ("Korcomptenz," "we," "us," or "our"), the developer of the Altiaris enterprise decisioning platform ("Altiaris"), collects, uses, discloses, and protects personal information in connection with:.

• Thealtiaris.aiwebsite and related marketing properties (the "Site")
• The Altiaris platform itself when deployed by a customer organization (the "Platform")

Altiaris is offered to enterprise customers on a business-to-business basis. When Korcomptenz processes customer-provided data within the Platform solely to provide the services and in accordance with the customer’s documented instructions, Korcomptenz generally acts as a data processor, service provider, or contractor. The customer organization generally acts as the data controller or business and determines why and how that information is processed.

Korcomptenz may act as an independent controller or business for limited information processed for its own purposes, such as account administration, billing, security, fraud prevention, legal compliance, Site operations, and management of customer and prospect relationships.

Customer data processed through the Platform is also governed by the applicable customer agreement, Data Processing Addendum, Business Associate Agreement, or other contractual terms. If this Policy conflicts with those agreements regarding customer data, the applicable agreement will control.

• Website visitors: individuals browsing the Altiaris website, requesting a demo, downloading resources, or subscribing to communications.
• Prospects and customers: individuals at organizations engaging with Korcomptenz's sales, marketing, and customer success teams.
• Platform end users: individuals authorized by a customer organization to log in to and use Altiaris (e.g., a plant manager, VP of finance, or clinical leader).
• Data subjects referenced within customer data: individuals whose data (e.g., patient records, employee records, supplier records) is processed within a customer's Altiaris deployment. For these individuals, the customer organization's own privacy notice governs, and inquiries should generally be directed to that organization; Korcomptenz processes this data solely as instructed by the customer.
• This Policy does not apply to third-party websites, applications, or services that have their own privacy notices.

We may use the information we collect from you when you register, make a purchase, sign up for our newsletter, respond to a survey or marketing communication, surf the website, or use certain other site features in the following ways:

• Contact and identification information you provide, such as name, business email address, phone number, job title, and company name, when requesting a demo, downloading a resource, or contacting us.
• Usage and device information collected automatically, such as IP address, browser type, device type, pages visited, and referral source, typically via cookies and similar technologies.
• Communications you send us, including questions, feedback, or support requests.
• Account and access information for authorized Platform users: name, business email, role, and access permissions, provided and administered by the customer organization.
• Operational data ingested into Altiaris by the customer from its own systems (e.g., ERP, EHR, MES, CRM, financial systems), which may include personal information depending on the customer's configuration and use case (for example, patient identifiers in a healthcare deployment, or employee identifiers in a workforce planning use case).
• Depending on the customer’s industry, configuration, and use case, customer data may include sensitive personal information, such as health information, financial information, employment information, government or system identifiers, or account and access information.
• Platform usage and governance information, including user activity, agent actions, prompts, queries, responses, AI-generated outputs, approval and override history, Copilot interaction logs, access records, system events, diagnostics, security records, and governance audit trails. Depending on the customer’s configuration and user inputs, these records may contain personal information or customer data.We may obtain information directly from you, from the organization you represent, automatically through the Site or Platform, from customer-configured systems and integrations, from service providers and business partners, and from publicly available professional sources.

• To respond to inquiries and demo requests, and to provide requested marketing materials.
• To operate, secure, and improve the Site.
• To send marketing communications, where you have consented or as otherwise permitted by applicable law, always with the ability to opt out.
• To comply with legal obligations and enforce our terms.
• To provide, operate, secure, and support the Altiaris Platform strictly in accordance with the customer's instructions and the applicable Data Processing Addendum.
• To maintain audit logs, governance records, approval histories, and security monitoring required by the Platform’s architecture, customer configuration, contractual requirements, and applicable law.To provide account administration, technical support, and platform reliability services requested by the customer.
• We do not use customer operational data, prompts, outputs, or Platform content to train shared or general-purpose AI models or to improve products or services for other customers unless the customer has expressly instructed or authorized us to do so in writing.
• Customer-specific retrieval, configuration, evaluation, fine-tuning, or other AI processing is performed only as directed by the customer and subject to the applicable agreement.
• We do not sell personal information processed within the Platform.

Altiaris may generate predictions, recommendations, alerts, summaries, scores, classifications, or proposed actions based on customer-provided data, instructions, rules, models, and Platform configurations.

The customer determines the Platform’s use cases, the data made available to Altiaris, the applicable rules and workflows, the level of human review required, and how Platform outputs are interpreted or used.

Korcomptenz does not independently determine whether a customer will use Platform outputs to make employment, healthcare, financial, eligibility, service, or other decisions about individuals.

Customers are responsible for ensuring that their use of Altiaris complies with applicable requirements relating to transparency, fairness, accuracy, explainability, human oversight, profiling, and automated decision-making.

Altiaris outputs are intended to support authorized users and should be reviewed in accordance with the customer’s governance policies before actions with material consequences are taken.

Where applicable law requires a legal basis (for example, under the EU/UK GDPR), Korcomptenz relies on:

• Performance of a contract or steps requested before entering into a contract: To respond to requested sales inquiries, administer customer accounts, provide Platform access, deliver services and support, manage billing, and perform contractual obligations.
• Legitimate interests: To operate and secure our systems, prevent fraud and misuse, manage business relationships, analyze Site performance, improve services, and communicate with professional contacts, provided those interests are not overridden by the individual’s rights.
• Consent: For non-essential cookies, certain marketing communications, and other activities where consent is required. Consent may be withdrawn at any time.
• Compliance with legal obligations: To comply with applicable laws, regulatory requirements, court orders, and lawful requests.
• Legal claims: To establish, exercise, or defend legal rights and claims.

Where Korcomptenz processes customer data as a processor or service provider, the customer determines the applicable legal basis for that processing.

• Cloud and technology providers: Altiaris uses Microsoft technologies that may include Microsoft Fabric, Microsoft Foundry, Microsoft Azure services, and Copilot Studio. Depending on the deployment and contracting model, these providers may process information under the customer’s direct agreement with the provider or as a sub-processor or service provider engaged by Korcomptenz.
• Where Korcomptenz engages a provider to process personal information on its behalf, the provider is subject to contractual confidentiality, security, and data protection obligations. A current list of applicable sub-processors may be made available through customer documentation, a sub-processor page, or upon request.
• Within Korcomptenz: personnel who need access to perform their job functions, such as sales, customer success, engineering, and security teams, subject to internal access controls.
• At the customer’s direction: We may disclose or make customer data available to integrations, applications, users, systems, or third parties selected, configured, or authorized by the customer.
• Legal and safety: where required to comply with law, respond to lawful requests from public authorities, or protect the rights, property, or safety of Korcomptenz, our customers, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.
• We do not sell customer data processed within the Platform or disclose that data to third parties for their independent marketing purposes.
• We do not sell personal information collected through the Site. Where Site technologies constitute “sharing,” targeted advertising, or a similar activity under applicable law, we will provide the required notice and opt-out mechanism.

Altiaris is typically deployed within the customer’s designated Microsoft Azure environment or tenant. Data location and residency depend on the customer’s selected Azure region, Platform configuration, enabled Microsoft services, integrations, and agreed support arrangements.. Where Korcomptenz personnel or sub-processors access data across borders (for example, for support purposes), such transfers are made subject to appropriate safeguards, such as Standard Contractual Clauses, where required by applicable law.

• Site, marketing, prospect, and business-contact information is retained based on the purpose for which it was collected, the duration of the business relationship, applicable limitation periods, legal and regulatory obligations, security requirements, and Korcomptenz’s documented retention practices. When information is no longer required, it is deleted, anonymized, or securely retained where continued storage is required by law.Platform data is retained in accordance with the customer's instructions and the terms of the applicable Master Services Agreement or Data Processing Addendum. Upon termination of a customer's subscription, Platform data is handled (returned, exported, or deleted) as specified in that agreement.

Deletion from active systems may not immediately remove information from encrypted backups, disaster-recovery systems, security records, or audit logs. Residual copies are protected from ordinary use and deleted or overwritten in accordance with applicable retention schedules, unless continued retention is required by law.

Depending on your location and subject to applicable exceptions, you may have the right to access, correct, delete, or restrict the processing of your personal information; object to certain processing; withdraw consent; receive certain information in a portable format; and obtain information about the sources, purposes, and recipients of your personal information.

You may also have the right to opt out of the sale or sharing of personal information, targeted advertising, or certain profiling; limit certain uses of sensitive personal information; appeal the denial of a request; use an authorized agent; exercise your rights without unlawful discrimination; and lodge a complaint with an applicable privacy or data protection authority.

If you are an individual whose data is processed within a customer's Altiaris deployment (for example, a patient or employee of one of our customers), please direct your request to that organization in the first instance, as they control how your data is used. For all other requests, contact [email protected].

The Site uses necessary, functional, performance, and analytics cookies to operate the Site and understand how it is used. Where required by applicable law, we obtain your consent before setting non-essential cookies, and you can manage your preferences through the cookie settings tool on the Site or through your browser settings.

We maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Depending on the nature of the information and the applicable deployment model, these safeguards may include encryption in transit and at rest, identity and access controls, role-based permissions, multi-factor authentication, tenant or environment segregation, audit logging, security monitoring, vulnerability management, backup and recovery controls, incident-response procedures, and personnel confidentiality requirements.

No method of electronic transmission, storage, or processing is completely secure, and Korcomptenz cannot guarantee absolute security.

Customers are responsible for securely configuring their Altiaris deployments, managing user access, protecting credentials, reviewing Platform outputs, and implementing controls appropriate to their use cases.

For additional information about Platform-level safeguards, see the Altiaris Security and Compliance page.

The Site and Platform are designed for enterprise and professional use and are not directed to children.

Korcomptenz does not knowingly collect personal information directly from children through the Site. If you believe that a child has directly provided personal information through the Site, contact us so that we can investigate and take appropriate action.

A customer organization may process information relating to minors within Altiaris where permitted by law and appropriate for its use case, such as in a healthcare deployment. In those circumstances, Korcomptenz processes the information on the customer’s instructions and subject to the applicable agreement.

The Site or Platform may contain links to, or integrations with, third-party websites, applications, platforms, or services.

Korcomptenz is not responsible for the privacy, security, or data-handling practices of third parties acting independently of Korcomptenz. Their practices are governed by their own agreements and privacy notices.

Customers are responsible for evaluating and authorizing third-party integrations connected to their Altiaris deployment.

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, services, deployment models, or legal obligations.

We will post the revised Policy with an updated “Last Updated” date. Where changes are material, we may provide additional notice through the Site, Platform, email, customer communications, or another appropriate method.

Unless otherwise stated, changes become effective when the updated Policy is posted.

Questions about these Terms can be directed to:

Doing business as Korcomptenz

Attn: Legal Department
35 Waterview Boulevard, Suite 207
Parsippany, New Jersey 07054
United States

Email: [email protected]