Demo Request Solution Request 

Privacy Policy

Avistix™ Privacy, Information Security, Artificial Intelligence and Intellectual Property Policy

Introduction

Avistix™ is a proprietary AI-driven risk intelligence platform developed and owned by The Strategic Consulting Group (SCG). The platform is designed to help organizations transform complex data, risk signals, and fragmented information into structured intelligence that supports defensible decisions and actionable outcomes.

SCG is committed to protecting the confidentiality, integrity, availability, and privacy of information entrusted to us by our customers, partners, and users.

By accessing the Avistix™ website, platform, or related services, users acknowledge and agree to the terms outlined in this Policy.

Information Security Commitment

The Strategic Consulting Group (SCG) is committed to protecting the confidentiality, integrity, and availability of all information shared through the Avistix™ platform and associated services.

Our information security practices are aligned, where appropriate, with recognized industry standards, frameworks, and best practices, including:

  • ISO/IEC 27001 Information Security Management Systems;

  • NIST 800 Series guidance;

  • Applicable privacy, cybersecurity, and regulatory requirements; and

  • Industry-recognized risk management, business continuity, and information protection practices.

SCG implements reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, destruction, misuse, or loss.

These safeguards may include:

  • Information classification and handling procedures;

  • Access management and authentication controls;

  • Encryption and cryptographic protections where appropriate;

  • Security monitoring and incident response processes;

  • Backup and recovery capabilities;

  • Business continuity measures; and

  • Ongoing security awareness and governance activities.

Additional information regarding SCG's security practices may be provided through separate contractual agreements, security attestations, or customer-specific documentation.

Collection of Information

SCG collects only the information reasonably required to:

  • Operate and improve the Avistix™ website and platform;

  • Authenticate users and administer accounts;

  • Deliver products and services;

  • Respond to support requests and inquiries;

  • Monitor platform security and performance;

  • Meet legal, regulatory, and contractual obligations; and

  • Improve user experience and platform functionality.

Information may include:

  • Contact information;

  • Account information;

  • Organization information;

  • Technical and system information;

  • Usage data; and

  • Information voluntarily provided by users.

Website Analytics and User Metadata

When users access the Avistix™ website, certain technical information may be automatically collected, including:

  • IP address;

  • Browser type and version;

  • Device and operating system information;

  • Referring and exit pages;

  • Date and time of access;

  • Geographic region or country; and

  • Website usage statistics.

This information is used exclusively for:

  • Website administration;

  • Security monitoring;

  • Troubleshooting;

  • Performance optimization;

  • Analytics; and

  • Improving the overall user experience.

SCG does not sell, rent, or trade this information.

Use and Disclosure of Information

Information collected by SCG is used solely for legitimate business, operational, security, contractual, research, and customer support purposes.

SCG will not sell, rent, or commercially disclose customer information to third parties.

Information may only be disclosed:

  • With the consent of the customer or user;

  • As required by law or regulation;

  • In response to lawful requests by authorized authorities;

  • To fulfill contractual obligations; or

  • To protect the rights, safety, security, or integrity of SCG, its customers, users, or systems.

Customer Data Ownership

Customer information, data, reports, documents, assessments, analytics, knowledge bases, configurations, and content uploaded, entered, generated, or otherwise provided through the Avistix™ platform remain the property of the customer unless otherwise defined within a written agreement.

SCG claims no ownership rights over customer operational data or customer-created content.

SCG will treat customer information as confidential and will take reasonable measures to protect it from unauthorized access, disclosure, alteration, or misuse.

SCG will not use customer information to train public artificial intelligence models, public large language models, or third-party generative AI systems without the customer's explicit written authorization.

Artificial Intelligence Transparency and Human Oversight

Avistix™ is an AI-enabled risk intelligence and decision-support platform designed to assist organizations in identifying, analyzing, assessing, evaluating, and managing risks, threats, vulnerabilities, narratives, operational disruptions, compliance obligations, and other organizational challenges.

The platform may utilize artificial intelligence, machine learning, analytics, automation, forecasting models, and other advanced technologies to assist users in generating insights, assessments, recommendations, and reports.

All platform outputs are intended to support—not replace—human judgment and decision-making.

SCG does not represent or warrant that AI-generated outputs are complete, error-free, or suitable for every circumstance. Users remain responsible for reviewing, validating, and applying professional judgment to all platform outputs.

Final operational, business, legal, regulatory, security, financial, and strategic decisions remain the sole responsibility of the customer and its authorized personnel.

SCG is committed to the responsible use of artificial intelligence and seeks to operate Avistix™ in accordance with the principles of:

  • Transparency;

  • Accountability;

  • Security;

  • Privacy;

  • Reliability;

  • Fairness; and

  • Human oversight.

Intellectual Property Rights

Avistix™, Avistix Secure™, Avistix Intelligence™, and all associated software, methodologies, frameworks, taxonomies, knowledge bases, analytics, visualizations, reports, workflows, algorithms, documentation, trademarks, copyrights, designs, and related intellectual property are owned exclusively by The Strategic Consulting Group (SCG) unless otherwise stated in writing.

This includes, but is not limited to:

  • The Context of the Organization (CoTO) Model;

  • Codified Risk Language and associated methodologies;

  • BxT™, ExT™, and related analytical frameworks;

  • Narrative Risk Analysis methodologies;

  • Risk, Threat, and Vulnerability (TRV) models;

  • Knowledge base structures and schemas;

  • Predictive and contextual analytics models;

  • AI-assisted risk intelligence methods; and

  • Associated software code, reports, content, graphics, and documentation.

These materials are protected by applicable copyright, trademark, trade secret, and intellectual property laws.

Access to the Avistix™ platform does not transfer ownership of any intellectual property rights.

Use of Avistix™ is subject to the terms of an applicable licence agreement, subscription agreement, statement of work, service agreement, or other written authorization from SCG.

Users are granted a limited, non-exclusive, non-transferable, revocable licence to access and use the platform solely for authorized purposes.

Users may not:

  • Reproduce or distribute the platform;

  • Reverse engineer platform components;

  • Create derivative works;

  • Remove proprietary notices;

  • Resell platform access;

  • Republish proprietary content; or

  • Use Avistix™ intellectual property beyond the scope of the applicable licence agreement.

Third-Party Services and Links

The Avistix™ website or platform may contain links to third-party websites, services, applications, data sources, or integrations.

SCG does not control and is not responsible for the privacy practices, content, security, reliability, or availability of third-party services.

Users should review the privacy and security policies of any third-party service they choose to access.

Policy Updates

SCG reserves the right to modify, amend, or update this Policy at any time.

Any revisions will be posted on the Avistix™ website and become effective upon publication unless otherwise stated.

Continued use of the website or platform constitutes acceptance of any updated terms.

Contact Information

Questions regarding this Policy, privacy practices, information security, artificial intelligence governance, licensing, or intellectual property rights may be directed to The Strategic Consulting Group through the contact information provided on the Avistix™ website.