{
  "schemaVersion": 1,
  "baselineVersion": "2026-10-22.2",
  "revisionDate": "2026-10-22",
  "effectiveDate": "2026-10-22",
  "publicationStatus": "operationally-reviewed",
  "legalReviewStatus": "pending",
  "gitCommitSha": "d05af074b759512a31a8b9bca176a2c7eb062bfe",
  "facts": [
    {
      "key": "website.inquiries",
      "group": "uses",
      "surface": "website",
      "status": "verified",
      "value": "Website inquiries use GetWaitlist or the Cofr contact workflow, depending on the form.",
      "owner": "Cofr website owner",
      "sourceLabel": "Cofr privacy disclosure: contact and subscription information",
      "sourceUrl": "https://cofr.io/trust/privacy#waitlist",
      "lastVerifiedAt": "2026-10-21"
    },
    {
      "key": "website.contact-routing",
      "group": "providers-regions",
      "surface": "website",
      "status": "verified",
      "value": "Cofr's contact workflow stores submissions, notifies Cofr employees by email, and creates or updates records in its Cofr-managed CRM.",
      "owner": "Cofr operations owner",
      "sourceLabel": "Cofr provider disclosure: website and commercial providers",
      "sourceUrl": "https://cofr.io/trust/subprocessors#website",
      "lastVerifiedAt": "2026-10-21"
    },
    {
      "key": "website.analytics",
      "group": "uses",
      "surface": "website",
      "status": "verified",
      "value": "Production website analytics sends sanitized page and selected conversion metadata to Google Analytics.",
      "owner": "Cofr website owner",
      "sourceLabel": "Cofr privacy disclosure: site analytics",
      "sourceUrl": "https://cofr.io/trust/privacy#analytics",
      "lastVerifiedAt": "2026-10-21"
    },
    {
      "key": "website.billing",
      "group": "uses",
      "surface": "website",
      "status": "verified",
      "value": "The Growth checkout link opens a Stripe-hosted payment flow.",
      "owner": "Cofr website owner",
      "sourceLabel": "Cofr privacy disclosure: contact and subscription information",
      "sourceUrl": "https://cofr.io/trust/privacy#waitlist",
      "lastVerifiedAt": "2026-10-21"
    },
    {
      "key": "runtime.prompt-inference",
      "group": "uses",
      "surface": "hosted-prompt",
      "status": "verified",
      "value": "Cofr sends vaulted instructions and tool input to OpenAI through its API for hosted prompt execution. The specific model can change.",
      "owner": "Cofr platform owner",
      "sourceLabel": "Cofr data processing disclosure: prompt plugins",
      "sourceUrl": "https://cofr.io/trust/data-processing#prompt",
      "lastVerifiedAt": "2026-10-22"
    },
    {
      "key": "runtime.connected-backend",
      "group": "uses",
      "surface": "connected-tool",
      "status": "verified",
      "value": "A connected tool calls its configured service without using Cofr's prompt runtime.",
      "owner": "Cofr platform owner",
      "sourceLabel": "Cofr data processing disclosure: connected plugins",
      "sourceUrl": "https://cofr.io/trust/data-processing#connected",
      "lastVerifiedAt": "2026-10-21"
    },
    {
      "key": "runtime.invocation-history",
      "group": "settings-defaults",
      "surface": "hosted-service",
      "status": "verified",
      "value": "Cofr stores usage metadata separately from invocation records. Prompt invocations can contain clipped user input and output; connected input logs contain argument names and string lengths, with clipped output.",
      "owner": "Cofr platform owner",
      "sourceLabel": "Cofr data processing disclosure: invocation history and memory",
      "sourceUrl": "https://cofr.io/trust/data-processing#records",
      "lastVerifiedAt": "2026-10-21"
    },
    {
      "key": "runtime.memory-default",
      "group": "settings-defaults",
      "surface": "hosted-prompt",
      "status": "verified",
      "value": "Per-tool client and person memory write flags default to off for prompt execution; invocation history is separate.",
      "owner": "Cofr platform owner",
      "sourceLabel": "Cofr data processing disclosure: invocation history and memory",
      "sourceUrl": "https://cofr.io/trust/data-processing#records",
      "lastVerifiedAt": "2026-10-21"
    },
    {
      "key": "runtime.memory-read",
      "group": "uses",
      "surface": "hosted-prompt",
      "status": "verified",
      "value": "Deployment-bound prompt execution can load existing client and person records into model input independently of memory write flags.",
      "owner": "Cofr platform owner",
      "sourceLabel": "Cofr data processing disclosure: invocation history and memory",
      "sourceUrl": "https://cofr.io/trust/data-processing#records",
      "lastVerifiedAt": "2026-10-21"
    },
    {
      "key": "runtime.connected-memory",
      "group": "settings-defaults",
      "surface": "connected-tool",
      "status": "verified",
      "value": "The Cofr connected-tool path does not call Cofr's client or person memory writer; the configured backend may keep separate records.",
      "owner": "Cofr platform owner",
      "sourceLabel": "Cofr data processing disclosure: invocation history and memory",
      "sourceUrl": "https://cofr.io/trust/data-processing#records",
      "lastVerifiedAt": "2026-10-21"
    },
    {
      "key": "platform.access-boundary",
      "group": "settings-defaults",
      "surface": "hosted-service",
      "status": "verified",
      "value": "MCP access is checked against publication and tool policy: private calls use OAuth or scoped install credentials, while permitted public tools can accept anonymous calls.",
      "owner": "Cofr platform owner",
      "sourceLabel": "Cofr Trust Center: access and security",
      "sourceUrl": "https://cofr.io/trust#security",
      "lastVerifiedAt": "2026-10-21"
    },
    {
      "key": "platform.auth-and-vault",
      "group": "uses",
      "surface": "hosted-service",
      "status": "verified",
      "value": "Cofr uses an authentication service for sign-in and private storage for hosted plugin packages.",
      "owner": "Cofr platform owner",
      "sourceLabel": "Cofr data processing disclosure: accounts, vault, and billing records",
      "sourceUrl": "https://cofr.io/trust/data-processing#accounts",
      "lastVerifiedAt": "2026-10-21"
    },
    {
      "key": "platform.billing-records",
      "group": "uses",
      "surface": "hosted-service",
      "status": "verified",
      "value": "Cofr stores payment-provider customer, subscription, and price references with subscription status for billing access.",
      "owner": "Cofr platform owner",
      "sourceLabel": "Cofr data processing disclosure: accounts, vault, and billing records",
      "sourceUrl": "https://cofr.io/trust/data-processing#accounts",
      "lastVerifiedAt": "2026-10-21"
    },
    {
      "key": "infrastructure.processing-locations",
      "group": "providers-regions",
      "surface": "hosted-service",
      "status": "verified",
      "value": "Cofr's production API and Supabase database are in Ohio. Project Residency for the OpenAI API project used for Cofr prompt inference is set to Global.",
      "owner": "Cofr operations owner",
      "sourceLabel": "Cofr service providers disclosure: hosted-service providers",
      "sourceUrl": "https://cofr.io/trust/subprocessors#platform",
      "lastVerifiedAt": "2026-10-22"
    },
    {
      "key": "provider.inference-training-setting",
      "group": "settings-defaults",
      "surface": "hosted-prompt",
      "status": "verified",
      "value": "OpenAI API input/output sharing and model feedback, evaluation, and fine-tuning data sharing are disabled for Cofr's organization. OpenAI states API data is not used to train models by default unless an organization opts in.",
      "owner": "Cofr operations owner",
      "sourceLabel": "Cofr data processing disclosure: prompt plugins",
      "sourceUrl": "https://cofr.io/trust/data-processing#prompt",
      "lastVerifiedAt": "2026-10-22"
    },
    {
      "key": "legal.deletion-intake",
      "group": "responsibility-split",
      "surface": "all",
      "status": "verified",
      "value": "Cofr accepts access, correction, and deletion requests by email and handles intake manually.",
      "owner": "Cofr operations owner",
      "sourceLabel": "Cofr privacy disclosure: questions and requests",
      "sourceUrl": "https://cofr.io/trust/privacy#requests",
      "lastVerifiedAt": "2026-10-21"
    }
  ]
}