Privacy Policy for the Pragatix Platform

Document Notice

Please read the privacy policy carefully before using Pragatix by AGAT Software Development LTD.

57 Hagefen street, Aseret, Israel

No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of AGAT Software Inc. Under the law, reproducing includes translating into another language or format.

As between the parties, AGAT Software Inc., retains title to and ownership of all proprietary rights with respect to the software contained within its products. The software is protected by Israeli copyright laws and international treaty provision. Therefore, you must treat the software like any other copyrighted material, such as a book or sound recording.

Every effort has been made to ensure that the information in this document is accurate. AGAT Software Inc. is not responsible for printing or clerical errors. Information in this document is subject to change without notice.

Disclaimer

While AGAT uses reasonable efforts to include accurate and up-to-date information in this document, AGAT makes no warranties or representations as to its accuracy. AGAT assumes no liability or responsibility for any typographical or other errors or omissions in the content of this document.

Limitation of Liability

AGAT and/or its respective suppliers make no representations about the suitability of the information contained in this document for any purpose. Information is provided "as is" without warranty of any kind and is subject to change without notice. The entire risk arising out of its use remains with the recipient.

In no event shall AGAT and/or its respective suppliers be liable for any direct, consequential, incidental, special, punitive, or other damages whatsoever, including without limitation, damages for loss of business profits, business interruption, or loss of business information, even if AGAT has been advised of the possibility of such damages.

Introduction

AGAT's Pragatix is a security-first AI platform that enables enterprise-generative AI services with on-premises deployment and public AI Governance.

Pragatix offers three types of solutions:

AI Security Suite - for organizations that want to use public AI while maintaining full control.
Private/On-prem AI Suite - for companies that do not want to risk any data exposure.
Behaviour Intelligence - for executive visibility into AI adoption, ROI, and security.

AI Security Suite

The Security Suite provides end-to-end protection across human interactions, AI agents, models, and data, covering SaaS, homegrown applications, endpoints, and developer IDEs.

The main capabilities include:

Prompt Guardian is a real-time governance for public AI services such as ChatGPT, Copilot, and Claude.
Guardian Agent governs AI agents and tool activities via an AI Gateway for real-time policy enforcement. Additionally, the Guardian Agent provides discovery and enforcement of AI Agents using Network Proxy, Browser Extensions, API, and endpoint agents.
Model Guardian includes a Risk Engine that evaluates AI models using source intelligence and static and dynamic red teaming for vulnerability assessments.
AI Gateway enables developers and applications to securely access both internal and external AI services through a governed gateway that delivers full visibility, control, and cost and consumption management.
End Point Defender secures agents on the endpoint, such as IDE assistants, including GitHub Copilot, Cursor, and other third-party tools like OpenClaw and OpenCode.
Security Awareness provides visibility into AI usage to detect risks and deliver targeted, real-time, in-context training directly within tools like ChatGPT.

The AI Security Suite enforces risk-based policies, classifies data sensitivity, and provides full visibility into both enterprise and shadow AI usage, while delivering built-in security controls against major OWASP AI threats, including prompt injection, data leakage, and model abuse.

Private AI Suite

The AI Suite is an end-to-end, enterprise-ready local/on-prem AI platform. It ensures zero data exposure through flexible deployment options, ranging from fully air-gapped, no-internet environments to private cloud and full SaaS deployments.

By connecting to a wide variety of data sources such as documents, websites, and databases, Pragatix's Private AI delivers the following core capabilities:

Knowledge Assistant - generate answers from all company-connected sources and pre-trained knowledge, preserving source permissions and grounding answers to your data.
Data analysis - using natural language, perform complex data analysis on Excel and databases.
Smart search - search all your content beyond keyword matching, understanding the intent and context.
AI Agents - run AI agents to plan and perform tasks using Python code, such as internet search, image analysis, and speech to text. Integrate with MCP servers and expose the platform as an MCP server.
Workflow builder - build workflows using no-code drag and drop, calling AI Agents and other AI services.
Log analysis - ingest logs, classify and structure data, visualize, and apply real-time anomaly detection.
Data Extraction - capture, classify, and extract information from unstructured or semi-structured documents for IDP - Intelligent Document Processing.
Document Translation - translate documents preserving original layout and formatting.
Anomaly Detection - identify anomalies in data, such as logs.
AI Code Assistant - code completion, error detection, code generation, and answering questions from the company codebase.
Data Classification - automatically classify data based on existing data.
AI router - smart route AI prompts to cloud and on-prem multi-model services.

Behaviour Intelligence

The Behavioral Intelligence module provides real-time visibility into how employees use AI tools across the organization, identifying risky activities such as sharing sensitive information, unsafe agent usage, or policy violations. By analyzing actual user behavior and prompt activity, the platform delivers measurable insights into AI risk exposure and usage patterns.

When risky actions occur, employees receive immediate, in-context feedback and micro-training to help them correct their behavior in the moment. This approach transforms AI security from static policy enforcement into continuous learning, reducing risk while improving employee awareness and responsible AI usage.

AI Behavior Intelligence

Pragatix AI Behavior Intelligence enables organizations to improve productivity by measuring and optimizing employee interactions with AI across the enterprise.

The platform delivers enterprise adoption dashboards with role-based visibility for managers and executives, tracking adoption trends across departments and over time. It provides deep insight into AI usage and user intent, automatically classifying how AI is applied in real business workflows and identifying high-value use cases that can be replicated and scaled.

With full AI service visibility, organizations can monitor which AI tools and platforms are being used across both approved and public services and understand cross-platform usage patterns.

Through adoption benchmarking and enablement, the platform identifies top-performing users and AI champions, as well as teams that require additional support. It delivers personalized insights, performance-based guidance, and continuous progress reporting to improve how employees use AI.

By combining measurement, visibility, and targeted enablement, organizations can continuously improve human-AI interactions, driving higher efficiency, better outcomes, and clear, measurable ROI from AI adoption.

Identify power users who are getting the most out of generative AI features. These users could have generative AI tips, best practices, and workflows that can be shared with others in your organization.
Identify users with low adoption rates who might benefit from training and other materials related to generative AI.

Who We Are

AGAT has been a trusted provider of UC compliance solutions to highly secure and regulated enterprise companies.

Expanding our expertise, AGAT now offers Pragatix, a cutting-edge AI solution ensuring the secure and responsible use of Generative AI. Pragatix includes an AI Firewall and AI Suite solution offering knowledge chatbot, data analysis and search capabilities.

Information We Collect

Personal Information

User information: name, email address, and username for account access via Single Sign-On (SSO).

Corporate Data

As the nature of the AI Suite module is to analyze your company data, it has access to any data you connect, which includes:

Uploaded Documents: files and documents you upload to Pragatix.
Integrated Services: access to your Google Drive, Gmail, SharePoint, Confluence, and other integrated services.
Corporate Communications: emails and other communications accessed through integrations.

The Private AI has all the content of the data you connect to be able to answer questions from your data.

For users who use only the AI Firewall, the only data stored is the data involved in the AI interaction, which includes the prompt text, any files sent with the prompt text, and the response.

The Firewall collects all data of the AI services configured, which includes ChatGPT, Copilot, and Gemini.

Technical Data

Usage Data: information about how you interact with Pragatix, including IP addresses, browser type, operating system, and device information.
Log Data: server logs, error reports, and other diagnostic information.

How We Use Your Information

We utilize the collected data for the following purposes:

Service Provision: to operate, maintain, and improve Pragatix services.
Personalization: to tailor the chatbot experience based on your corporate data and user interactions.
Management: to facilitate connections with integrated services like Google Drive and Gmail.
Security: to protect against unauthorized access, data breaches, and other security threats.
Compliance: to comply with legal obligations and enforce our terms and policies.
Communication: to send updates, notifications, and respond to inquiries.

We do not use your information to develop, improve, or train AI and/or ML models.

Data Storage and Security

Storage

SaaS Deployment: data is stored on our secure cloud servers, utilizing industry-standard encryption both in transit and at rest.
On-Premises Deployment: data is stored on your organization's servers, with Pragatix providing the necessary tools and guidelines to ensure data security. When choosing a self-hosted/on-prem deployment, AGAT has no access to your data.

Security Measures

Encryption: all data transmitted between your systems and Pragatix is encrypted using SSL/TLS protocols.
Access Controls: strict access controls are in place to ensure that only authorized personnel can access your data.
Regular Audits: we conduct regular security audits and vulnerability assessments to maintain the integrity of our systems.
Compliance certification: AGAT has SOC2 type 2 security certification.

Securing Your Data

All data is encrypted in transit to and from the Internet, mitigating the risk of third parties accessing it. We store data in data centers around the globe in accordance with the needs of our customers. If needed, we offer a specific location for our SaaS depending on AWS availability in that country. We also offer an on-premises deployment that keeps our customers' data 100% secure and private according to their internal security guidelines.

Authentication and Access

Single Sign-On (SSO): Pragatix utilizes Single Sign-On (SSO) for user authentication. We do not collect or store user passwords. Instead, authentication is managed through your organization's chosen SSO provider, ensuring secure and streamlined access to our services.

Note that in the demo environment there is an option to create a local user in which we store the hash of your password.

Third-Party Integrations

Pragatix integrates with various third-party services such as Google Drive and Gmail. By enabling these integrations, you grant Pragatix access to specific data from these services to enhance functionality.

Access and Use: we access and process data from the service solely to provide the chatbot functionalities you have enabled. This includes reading, storing, and analysing your data to allow the chatbot to understand and respond based on your corporate data.
Storage: data accessed from the services is stored securely in accordance with our Data Storage and Security policies. We ensure that this data is encrypted both in transit and at rest.
No Sharing: we do not share any data accessed from the services with third parties. Your service data is used exclusively to deliver the intended services within Pragatix.
Limited Use Compliance: our use of the user data is limited to the practices disclosed in this Privacy Policy and conforms with standard compliance regulation.

We do not use your data for any purposes beyond providing and improving Pragatix services.

Cookies and Similar Technologies

What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently and to provide information to the owners of the site.

Types of Cookies We Use

Essential Cookies: these cookies are necessary for the basic functioning of Pragatix. They enable core functionalities such as security, network management, and accessibility.
Functional Cookies: these cookies allow Pragatix to remember choices you make, such as your language preference, and provide enhanced, more personalized features.

How We Use Cookies

Authentication: cookies help maintain your authenticated session as you navigate through Pragatix.
Customization: cookies enable us to remember your preferences and settings, providing a more personalized experience.

Third-Party Cookies

Pragatix does not share your data with third parties. We do not use third-party cookies for analytics or other purposes. If you encounter any third-party cookies while using Pragatix, they are governed by the privacy policies of those third parties, and we are not responsible for their practices.

Managing Cookies

You have the right to decide whether to accept or reject cookies. You can adjust your browser settings to refuse all cookies or to indicate when a cookie is being sent. However, please note that some parts of Pragatix may not function properly if cookies are disabled.

For more information on how to manage cookies, please refer to your browser's help documentation.

User Rights

You have the following rights regarding your data:

Access: request access to the data we hold about you.
Rectification: request corrections to inaccurate or incomplete data.
Deletion: request the deletion of your data, subject to legal and contractual obligations.
Objection: object to the processing of your data for certain purposes.

Please note that we do not offer data portability. This means you cannot request the transfer of your data to another service provider through our platform. To exercise these rights, please contact us using the information provided in the Contact Us section.

Data Retention

We retain your data for as long as necessary to provide Pragatix services, comply with our legal obligations, resolve disputes, and enforce our agreements. Specifically, after 30 days of decommissioning the service, personal data will be deleted. The specific retention periods may vary based on the type of data and its intended use.

Children's Privacy

Pragatix is intended for business and organizational use and is not directed to children under 13 or below the applicable age of digital consent. AGAT does not knowingly collect personal information from such children. If we learn that we have collected such information, we will take reasonable steps to delete it.

Users aged 13 to 17 may use Pragatix only where permitted by their organization and applicable law, and where any required parent, guardian, school, or organizational authorization has been obtained.

Choices of AI Engine

Organizations using Pragatix can select between public AI engines, such as OpenAI, and private AI engines, such as Llama3.1.

Public AI Engines: if you choose to use a public AI engine, your data may be processed by the chosen AI provider. We ensure that such providers comply with relevant data protection regulations and that the use of your data is limited to the purposes disclosed in this Privacy Policy.

Private AI Engines: selecting a private AI engine ensures that your data is processed solely within your infrastructure and is not shared with any third parties.

Compliance with Google Requirements

Pragatix complies with Google's policies regarding the access and use of Google user data. Specifically:

Disclosure: this Privacy Policy discloses how Pragatix accesses, uses, stores, and does not share Google user data.
Limited Use: our use of Google user data is strictly limited to the functionalities described in this policy. We do not use Google data for any additional purposes outside of providing and enhancing Pragatix services.

By integrating with Google services, we ensure that all interactions and data handling comply with Google's User Data Policy and respect user privacy and data security.

Confidentiality

In connection with all AGAT products, the Receiving Party may be given or have access to certain confidential information of AGAT Software or third parties, collectively, "Confidential Information". Confidential Information includes, but is not limited to, information regarding the organization, operations, programs, activities, policies, procedures, practices, financial condition, trade secrets, membership lists, and standards of AGAT Software, its members, or third parties.

Confidential Information also includes unpublished or pre-release versions of AGAT Software standards, white papers, and other internal-use or limited circulation documents and information.

The Receiving Party agrees not to disclose or permit the disclosure of any Confidential Information without the prior written consent of AGAT Software. The Receiving Party further agrees to use Confidential Information solely for the purpose of using Pragatix services and not for any personal or third-party benefit.

Disclaimer of Warranties

AGAT Software Inc. does not guarantee that Pragatix will be error-free or uninterrupted. The services are provided on an "as is" and "as available" basis without any warranties of any kind, either express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement.

International Data Transfers

Your data may be transferred to and processed in countries outside of your residence. We ensure that such transfers are conducted in accordance with applicable data protection laws and that appropriate safeguards are in place to protect your data.

Changes to This Privacy Policy

We reserve the right to change this privacy policy at any time. Any changes will be effective immediately upon posting the revised policy on our website. We encourage you to review this Privacy Policy periodically for any updates or changes.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on our website and updating the "Last Updated" date.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

For Security and Privacy Concerns: sales@agatsoftware.com
For Technical Support: support@agatsoftware.com
For General Information: sales@agatsoftware.com
For Questions and Comments about this Privacy Policy: support@agatsoftware.com

Privacy Policy