Sovereign Architecture & Privacy Center

Privacy-First Security Principle

Your SBOM Never Leaves Your Browser: Uploading confidential software inventories to third-party multi-tenant clouds creates an unacceptable supply-chain intelligence risk. Hermes Codex guarantees 100% in-browser evaluation with zero server-side persistence.

---

🔒 Technical Privacy Guarantees

100% Client-Side Processing

CycloneDX and SPDX SBOM parsing, component extraction, and vulnerability matching execute exclusively inside your local browser memory via JavaScript/WebAssembly.

Zero Server-Side Telemetry

No API endpoints receive your file contents. No database stores your application architecture, internal service names, or dependency versions.

Static Pre-Compiled CTI

Hermes downloads static threat indexes (/api/trajectories/index.json, /api/daily-brief/latest.json) to your browser, performing set intersections locally.

Reproducible Open Builds

All platform generation code, compilers, and schemas are publicly versioned on GitHub with deterministic hashes and continuous CI verification.

---

📊 Data Handling Matrix

Dimension	Policy	Technical Implementation
SBOM Files (JSON/XML)	Never Collected	Read via HTML5 File API in local memory only.
Custom Stack Components	Stored Locally Only	Saved strictly to your browser’s localStorage (hermes_my_stack).
Webhook URLs & Secrets	Stored Locally Only	Used for client-side direct dispatch or self-hosted CLI scripts.
Web Analytics	Privacy-Preserving	Zero invasive third-party tracking, zero cross-site fingerprinting.
Cloud Telemetry	None	No external tracking beacon or analytics vendor scripts.

---

🏗️ How Local In-Browser Matching Works

[User Workstation]
  ├── Selects SBOM (bom.json)
  ├── FileReader API loads JSON into local DOM memory
  ├── Downloads static threat index from Hermes CDN (/api/trajectories/index.json)
  ├── Performs client-side Set Intersection (O(N) local match)
  └── Renders Risk Trajectory & Decisive Actions in browser UI
       ↓
  [Zero bytes transmitted back to Hermes servers]

---

🎯 Privacy-First Funnel Telemetry (Sections 68 & 69)

In strict accordance with our sovereign architecture, Hermes Codex implements minimal, transparent, and fully documented conversion telemetry:

• Strict Purpose: Monitor high-level funnel milestones without identifying individuals (homepage_visit → explore_intel → analyze_stack → inspect_decision → view_pricing → contact_intent).
• Zero PII: No IP addresses, no user IDs, no cookies, no cross-site tracking beacons.
• Do Not Track Honored: If your browser sends DNT: 1 or Global Privacy Control (GPC), telemetry is unconditionally suspended.
• Client-Side Opt-Out: You can opt out at any time by running window.hermesTelemetry.setOptOut(true) in your browser console.