Security and data handling
Control architecture, incident sequence, assurance boundaries, and shared responsibility.
ReviewLoading secure experiencePreparing the current route and theme-safe workspace shell.
Procurement and security review
One review path, with claims separated from evidence.
Buyers can move from public controls to provider, privacy, DPA, support, and customer-specific evidence without treating product features as certifications or contractual service levels.
Review package
Evaluate the service in a deliberate order.
Each page owns one decision area so security, legal, and commercial statements do not blur together.
Privacy notice
Processing purposes, data categories, rights, disclosures, retention, and international-processing boundaries.
ReviewService-provider register
Named current providers, service functions, data categories, conditional use, and contracting boundaries.
ReviewDPA overview
Processor roles, instructions, confidentiality, safeguards, assistance, deletion, audits, and transfers.
ReviewTerms and billing
Account authority, service limits, confidentiality, fees, suspension, liability, and transaction boundaries.
ReviewSupport and incident routing
Request lanes, severity routing, evidence-preservation guidance, and customer-governed access changes.
ReviewAvailable on request
Customer review can go deeper without exposing the platform.
Disclosure remains subject to relevance, confidentiality, third-party restrictions, and safe handling.
A response to a reasonable customer security questionnaire scoped to the intended Clarity deployment.A discussion of DPA requirements and the published service-provider schedule; any executable DPA is prepared for the customer agreement.A data-flow and shared-responsibility discussion for the intended room configuration.Relevant control descriptions or operating evidence that exists and can be disclosed without exposing other customers, secrets, or security-sensitive implementation details.Retention, export, incident-contact, and recovery information applicable to the customer agreement and configured service.
Assurance boundaries
Know exactly what is not being claimed.
These boundaries keep procurement decisions tied to the current service and written commitments.
Review areaPublished position
Independent assuranceClarity does not currently claim an independent SOC 2 attestation. Product controls and operating evidence are not substitutes for third-party assurance.
AvailabilityNo public 24/7 support or uptime service level is promised. Contracted coverage and service levels apply only when stated in an executed Order.
Data residencyNo universal region or residency commitment is made. Applicable location and transfer terms must appear in the executed agreement.
Viewer protectionWatermarks, session controls, and browser restrictions deter and evidence misuse but cannot prevent cameras, endpoint capture, or every authorized-user disclosure.
Malware screeningRequired configured screening can block registration when a scan is unavailable or fails; no scanner guarantees detection of every threat.
RecoveryRecovery capability depends on configured providers and tested procedures. Customer-specific objectives or commitments must be stated in writing.