Privacy & Data
How Bombardier Tech handles data, protects privacy, and maintains compliance. Your data is yours, we never store it, sell it, or share it.
Last updated: March 2026
Our Core Principle
We do not store your business data. Every system we build runs entirely within your environment, your cloud, your servers, your infrastructure. Bombardier Tech operates as a builder and advisor, not a data processor. Your data never leaves your control.
Data Handling
Where is data stored?
All systems we build are deployed directly into your cloud infrastructure or on-premise environment. Bombardier Tech does not operate a centralized data store. Your data stays where you control it, always.
What data do we access?
During implementation, we may access: system APIs and credentials (stored securely, revoked after deployment), workflow data for testing and validation, and configuration settings. We access only what is necessary for the engagement scope.
How is data protected?
All data in transit is encrypted via TLS 1.3. Data at rest uses AES-256 encryption. We implement role-based access controls, audit logging, and follow the principle of least privilege. Security assessments are conducted regularly.
Do AI models process our data?
When AI features are active, data may be processed by third-party AI APIs (e.g., OpenAI, Anthropic) for inference only. No client data is used to train external models. We can deploy fully private models on your infrastructure upon request.
Do you monitor our systems?
With your authorization, we provide ongoing monitoring for system health, performance, and anomalies. Monitoring data is limited to operational metrics, we do not access or read your business data during monitoring.
What happens when the engagement ends?
Upon termination, all access credentials are revoked within 24 hours. Since systems run in your environment, your data remains fully under your control. We provide complete documentation and handoff materials. Any temporary data on our side is permanently deleted within 30 days with written confirmation.
Cookies & Website
Cookies on bombardiertech.com
Our website uses only essential cookies required for basic functionality, no tracking cookies, no advertising cookies, and no third-party analytics that identify individual users. We do not use cookie-based retargeting or behavioral profiling.
Analytics
We may use privacy-respecting analytics (e.g., aggregate page view counts) to improve our website experience. No personally identifiable information is collected or stored through analytics. We do not use Google Analytics or similar tracking platforms.
Third-Party Services
Our website may embed content from third-party services (e.g., contact forms). These services operate under their own privacy policies. We select only providers that meet our privacy and security standards.
Legal & Compliance
GDPR Compliance
Bombardier Tech operates in full compliance with the General Data Protection Regulation (GDPR). We process personal data only with explicit legal basis, implement data minimization principles, support right of access and right to erasure requests, execute Data Processing Agreements (DPAs) with all clients processing EU personal data, and maintain transparent records of all data processing activities. You may request access to or deletion of any personal data at any time by contacting us.
SOC 2 & Security Standards
Our processes and infrastructure adhere to SOC 2 Type II principles covering security, availability, and confidentiality. We conduct regular penetration testing, maintain an incident response plan, and require multi-factor authentication for all system access. Our team undergoes annual security training.
Terms of Service
By engaging Bombardier Tech, you agree to our standard terms of service which govern the scope of work, deliverables, payment terms, intellectual property rights, limitation of liability, and termination conditions. Custom enterprise agreements are available upon request. You retain full ownership of all business data, content, and outputs generated by systems we build. Bombardier Tech retains ownership of proprietary frameworks and methodologies used in implementation.