MSI Data Protection & Privacy

1. Roles and responsibility

In the context of MSI platform usage, the customer acts as the data controller for the datasets they provide.

MathIAs+ acts as a data processor, processing data strictly on documented customer instructions.

2. Data scope

MSI processes only the data explicitly provided by the customer, including structured datasets and associated technical metadata.

No external enrichment, data merging, or hidden data sources are used.

3. Core processing principles

MSI operates under strict deterministic and responsible AI principles:

• No model training on customer data
• No reuse of datasets across customers
• No hidden learning or adaptive behaviour
• Full reproducibility of analytical results

4. Data retention

Data is retained only for the duration necessary to execute the requested processing, unless otherwise defined by contractual agreement.

MathIAs+ is designed to minimize or eliminate persistent data storage wherever technically feasible.

5. Security and hosting

MSI is hosted on Microsoft Azure, within controlled infrastructure environments aligned with enterprise security standards.

Logical isolation mechanisms are implemented to ensure strict separation between customer datasets.

6. Subprocessors

The platform relies on Microsoft Azure as its primary infrastructure provider.

No additional subprocessors are used without appropriate contractual safeguards.

7. Customer control and rights

Customers retain full control over their data and may request access, correction, export, or deletion in accordance with applicable regulations and contractual terms.