Privacy policy

Cognance provides governed AI decision infrastructure for regulated financial institutions. This policy explains what we collect from visitors to this website and, separately, how we handle data processed through our KYC service on behalf of client institutions.

Cognance is currently being incorporated. Until then, questions about this policy go to privacy@cognance.in. This page will name the legal entity once incorporation is complete.

If you submit the pilot-access form, we collect the details you provide — such as your name, work email, company, role, and any message — solely to respond to your enquiry and evaluate a potential pilot. We do not sell this information. Form submissions are handled by our form provider on our behalf.

Pilot-form submissions are kept for up to 12 months after our last contact, then deleted, unless a pilot or contract begins.

Email privacy@cognance.in at any time to withdraw consent or ask us to delete your enquiry details. Withdrawing is as easy as giving consent.

Send any concern about how we handle your personal data to privacy@cognance.in. We respond within a reasonable period not exceeding 90 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

For the KYC service, we deliberately minimize the personal data we receive. Client institutions send us only an application reference and two name strings (the name as recorded on a PAN and on an Aadhaar). We do not receive Aadhaar or PAN numbers, dates of birth, addresses, document images, biometrics, or financial information.

Name strings are retained for a maximum of 7 days and are then scrubbed. The resulting non-personal decision record — status, confidence score, reasoning, model version, and timestamps — is retained for up to 5 years to meet PMLA and RBI record-keeping expectations. Data is encrypted in transit and at rest.

Processing currently takes place on Amazon Web Services infrastructure in the Asia Pacific (Sydney) region. India-region data residency is on our roadmap. We will confirm the applicable residency arrangements in writing as part of client onboarding.

We rely on a small set of service providers to run the site and the KYC service; the current list is on our subprocessors page. Enquiry submissions are processed by our form provider in the United States.

This website and our services are intended for businesses and are not directed at individuals under 18.

This website does not use cookies or analytics.

For website enquiries, you can ask us to access or delete the information you submitted by emailing us. For data processed through the KYC service, the client institution is the data controller; requests from individuals should be directed to that institution, and we support it in fulfilling them as a processor.

Questions about this policy can be sent to privacy@cognance.in.