SANCTUM SECOPS · PKI / PQC CONSOLE

Sanctum SecOps LLC PKI Repository Privacy Policy

Status: DRAFT — v0.1 Version: 0.1 Effective date: DRAFT — not yet effective. Pending Brian Vicente review and approval. Document date: 2026-07-27 Applies to: the public PKI repository at pki.sanctumsecops.com and crl.sanctumsecops.com.

DRAFT NOTICE. This is a v0.1 draft template. It has not been reviewed by counsel or approved by Sanctum SecOps LLC.

1. Scope

This Privacy Policy describes what information the Sanctum SecOps LLC public PKI repository collects, and how it is used, when the repository is accessed by subscribers or relying parties.

2. Information in certificates

Certificates published under /aia/ and /pem/ contain subject identity information supplied at issuance time (see docs/CP.md Section 3, "Identification and authentication"). As of v0.1, the only certificate published is the LAB/TEST sample leaf demo.pki.sanctumsecops.com, which contains no personal information.

3. Server access logs

The pki. and crl. hosts are served over plain HTTP by design (see docs/CP.md Section 4.9.7.3). Standard web server access logs (IP address, timestamp, requested path, user agent) may be retained per Sanctum SecOps LLC's general log-retention practice. No stipulation on retention period in v0.1 — placeholder pending formal policy.

4. No cookies, no tracking scripts

The repository is static HTML/CSS with no JavaScript framework, no third-party trackers, and no cookies (see public/index.html and public/oid/index.html).

5. Data shared with third parties

No stipulation in v0.1. No data-sharing arrangements currently exist for this repository.

6. Your rights

No stipulation in v0.1. This section is a placeholder pending finalization against applicable privacy law (e.g., CCPA, GDPR if EU subscribers/relying parties are in scope).

7. Contact

Brian Vicente, [email protected].

8. Amendments

Future versions will be published at public/policy/privacy-policy.html and .pdf, rendered from this same Markdown source by scripts/render-docs.py.

DRAFT v0.1 — for Brian Vicente's review. Rendered from a single Markdown source so HTML and PDF outputs can never diverge.

Rendered 2026-07-27 11:56 UTC by scripts/render-docs.py from a single Markdown source. HTML and PDF outputs are generated from the same source and can never diverge.