Deployment and data handling
Sheet 07 · Rev A
Inside your building. Nothing leaves.
This sheet is written for the person who has to say yes: your IT lead, your FSO, your CMMC consultant. Forward it as it is.
Cogentic · Where it runsDoc DS-01 · Rev A · 2026
- Runs on
- A machine you own, inside your building. Windows, macOS or Linux desktop install, or a single server you administer.
- Network
- Offline. Air-gap capable. No cloud account is created and no cloud service is called.
- Telemetry
- None. No usage reporting, no crash reporting, no automatic updates.
- Remote access
- None. Cogentic has no login to your systems and no tunnel into your network.
- Install media
- Installer and checksums delivered on media you control; updates the same way, on your schedule.
Cogentic · What we do and do not doDoc DS-02 · Rev A · 2026
- What we see
- During the exploratory phase our engineers work on your premises, on your machine, with your people in the room.
- What we hold
- Nothing. Cogentic does not copy, store or transmit your records, your part numbers or your technical data.
- Your controls
- Deployable inside ITAR and NIST SP 800-171 controls you already run. No new data flow to add to your system security plan.
- Our engineers
- On-site delivery engineers are US persons. No customer technical data is handled by a non-US person. Each engineer signs your NDA and your visitor and badge rules.
- Vendor review
- We answer your security questionnaire in writing before any scoping call and sign a mutual NDA first.
Cogentic · What you ownDoc DS-03 · Rev A · 2026
- Pipelines and data model
- Yours. Built on your systems, documented at handover.
- Models
- Yours. Every model traces to a hashed, re-runnable plan with its cleaning steps versioned.
- The software
- Ours. Cogentic owns all intellectual property in the product; assignments are on file and available to your counsel under NDA.
- Audit trail
- Every run is logged on your machine. Re-run the plan and you get the same model.
- If we disappear
- Your engineer keeps running it. Training at handover; no dependency on Cogentic to operate.
Cogentic holds no certification and claims none. Statements above describe how the software is built and how engagements are run; your assessor decides what that means inside your boundary.
Questions
Send us your vendor questionnaire.
We answer it once, in writing, before any scoping call. Or start with the six questions and no call.