AIA Index Privacy and Data Handling Statement
Scope
This statement explains how the AIA Index handles data when it is deployed through Microsoft Marketplace into a customer's own Microsoft Azure environment. It applies to the AIA Index offer published by AI Assurance Group, LLC ("AI Assurance").
It does not cover our website. Website visitors are covered by our website privacy policy. Customers with a separate agreement with AI Assurance, such as a Master Subscription Agreement, should refer to that agreement, which governs if it conflicts with this statement.
Where the AIA Index runs
The AIA Index runs entirely inside the customer's own Azure Kubernetes Service cluster, in the Azure subscription and region the customer chooses. AI Assurance does not host the AIA Index for Marketplace customers and does not operate any part of the customer's environment.
The customer controls the cluster, its network access, its identity and access settings, and where its data is stored.
Data the AIA Index processes
To score a monitored model, the AIA Index reads data the customer connects to it. All of it is processed and stored inside the customer's environment.
The customer decides which models and data sources to connect. The AIA Index does not need personal data to work. If a customer's model processes personal or regulated data, the customer controls whether that data is connected and how long it is kept.
Data shared with AI Assurance
Customer model data, operational data, and AIA Index results never leave the customer's environment. AI Assurance does not receive, view, or store them. The AIA Index does not send telemetry or usage data to AI Assurance.
Microsoft Marketplace billing and account data
Microsoft handles purchasing and billing for the AIA Index through the customer's Azure account. For the usage-based plan, Microsoft meters how long the AIA Index runs in each cluster and bills the customer directly. That metering is governed by the customer's agreement with Microsoft and the Microsoft Privacy Statement.
As the publisher, AI Assurance receives from Microsoft the purchasing organization's name, contact details, subscription and plan information, and usage totals for billing. We use this information only to provide, support, and bill for the AIA Index, and to contact the customer about their purchase. We do not sell it.
Retention and deletion
The customer controls how long data is kept in its environment and can delete it at any time. Removing the AIA Index from the cluster stops all processing. Data stored in the customer's Azure storage remains until the customer deletes it.
Security
The customer is responsible for securing its Azure environment, including network access, identity, and encryption settings. AI Assurance is responsible for the security of the AIA Index software it provides. AI Assurance's security practices are aligned with SOC 2 principles.
Support access
AI Assurance has no standing access to a customer's environment. If a customer requests support that requires access, the customer grants it, controls its scope and duration, and can revoke it at any time.
Healthcare data
Because the AIA Index runs in the customer's environment and AI Assurance does not receive customer content, AI Assurance does not ordinarily create, receive, maintain, or transmit protected health information. Where a customer's use would give AI Assurance access to protected health information, such as during a support session, the parties will sign a Business Associate Agreement before that access is granted.
Changes to this statement
We will post any updates to this statement on this page with a new effective date. Material changes will also be communicated to active customers.
Contact
Questions about this statement or about how the AIA Index handles data can be sent to privacy@aiassurancegroup.com.
AI Assurance Group, LLC · Nashville, TN
Effective date: November 5, 2026
