Decision Intelligence Platform – Last updated: 20 February 2026.

• What this covers. This statement explains how CLAPHMONT LTD (“Claphmont”, “we”, “us”) processes personal data in connection with the Decision Intelligence Platform made available through Microsoft AppSource / Microsoft Marketplace.
• Roles and accountability. Claphmont operates as a data processor under applicable data protection laws, including the UK GDPR and EU GDPR. Customers act as data controllers and determine the content, purpose, and legal basis for processing.
• Operating model. The platform operates within the customer’s Microsoft tenant. Personal data processed through the platform is limited to customer‑provided documents and content.
• Website forms. Where applicable, Claphmont processes limited contact information (for example, name, email address, and message content) voluntarily submitted through website contact or support forms. Forms are used to manage enquiries efficiently and reduce unsolicited or automated submissions.
• Purpose of processing. Personal data is processed solely to operate and support the platform, including ingesting and structuring documents, generating decision‑support outputs, responding to enquiries or support requests submitted via forms, and providing technical assistance at the customer’s request.
• Decision making. The platform does not perform automated decision‑making and does not execute actions based on personal data.
• Use of AI. Where artificial intelligence capabilities are used, they are governed by Microsoft services, operate within Microsoft‑controlled environments, do not involve training AI models on customer data outside the customer’s Microsoft tenant, and generate assistive, informational outputs only.
• Data sharing. Claphmont does not sell customer data or share it with third parties. Microsoft acts as a sub‑processor solely to provide underlying cloud and AI services.
• Data location. Claphmont does not independently transfer customer data outside the United Kingdom or the European Economic Area.
• Retention. Personal data is retained only for as long as necessary to operate the platform or meet applicable legal requirements. Primary control over data retention remains with the customer through Microsoft tenant configuration.
• Security. Claphmont applies appropriate technical and organisational measures to protect personal data throughout processing.
• Individual rights. Data subject rights requests should be directed to the customer as data controller. Claphmont provides reasonable assistance where required by law.
• Contact. Privacy‑related enquiries may be submitted via the website contact form, which serves as the primary communication channel.