Trust

Trust centre

How we protect your data, how we use AI, and what we do not yet claim. If something here is not true in practice, tell us.
Report a concern
Last updated 14 Oct 2026 · Changes are logged at the foot of this page

In short

strategy1's trust centre explains how client data is protected, how AI is used in strategy work and how strategy1 approaches India's DPDP Act. Each control says whether it is in place, in progress or not claimed. A named person approves every recommendation, and strategy1 holds no security certifications today.

How to read this page

Every control carries one of three labels.

In place
True today.
In progress
Designed, not yet in place. No date shown.
Not claimed
We do not hold this.

Five pillars

Board-grade means you can check it.

Every number links to evidence with a confidence grade, every plan is red-teamed, and licensed Domain Fellows sign the parts that carry liability.
  1. 01

    Evidence ledger

    Each number and claim links to a source, a date and the agent that produced it.

  2. 02

    Confidence grading

    A, B or C next to every key figure.

  3. 03

    Red-team report

    Every strategy ships with its strongest counter-arguments and the conditions under which it fails.

  4. 04

    Expert sign-off

    Domain Fellows review and sign the parts that carry professional liability.

  5. 05

    Data protection

    Client-isolated Twins and role-based access, built for India's DPDP Act.

How we use AI

AI does the heavy lifting. People make the decisions.

strategy1 uses AI systems, including Anthropic's Claude models, to research, analyse and draft.

We tell you when AI was used.

Every engagement letter carries an AI-use clause. Every deliverable carries this line:

Prepared by strategy1 with AI assistance (Claude models). Reviewed and approved by named Strategy Partner; sections marked ✓ signed by Domain Fellow. Every figure links to its source and confidence grade.
Every deliverable carries this line. Dashed text is filled with the names of the people who signed.
  1. 01

    A named person approves every recommendation.

    A strategy1 professional with authority to change it reviews and approves every recommendation. Where an engagement needs expert sign-off, a Domain Fellow signs too.

  2. 02

    3 signed gates.

    Nothing moves past the Model, Decide or Deploy gate without a signed approval record.

  3. 03

    The model explains. It does not calculate.

    Financial and technical numbers come from our own code, not from the language model.

  4. 04

    Every figure has a source.

    Each number and claim links to a source, a date and the agent that produced it, with a confidence grade: A (verified primary source or client data), B (credible secondary source) or C (model estimate).

  5. 05

    Nothing is written into your systems without approval.

    Approved decisions become CRM opportunities, budgets, briefs or run-sheets only after your named owner accepts them.

  6. 06

    What we will not do.

    We do not produce content meant to deceive people about who is speaking, or run influence campaigns that hide their origin.

  7. 07

    The Readiness Scan.

    The Scan is a Claude agent with no access to your systems. It uses web search only, follows a fixed set of questions, shows you an itemised privacy notice and records your consent. Your answers seed a Bootcamp brief only if you continue and agree.

  1. 01Sense
  2. 02ModelH1signed
    approval
  3. 03Simulate
  4. 04DecideH2signed
    approval
  5. 05DeployH3signed
    approval
  6. 06Learn

Outcomes flow back into the Twin

Fig 7.1The S1 Method: six stages, three signed human gates. Nothing moves past Model, Decide or Deploy without a signed approval record.
Read the full AI-use statement

Your data

What is in place, what is in progress, what we do not claim

Select a status to narrow the list.

Showing all 9 commitments.

CommitmentWhat it meansStatus
Client isolationEach client's Strategy Twin is kept separate. One client's data cannot be retrieved in another client's work.In place
Access controlRole-based access, single sign-on and multi-factor authentication for our staff.In place
Model trainingUnder our commercial terms with Anthropic, client content is not used to train models without permission.Per contract
Twins model markets, not peopleStrategy Twins model markets, assets and decisions. Customer personas are aggregates. Named people appear only as business contacts where the work needs them.In place
EncryptionEncryption at rest with per-client keys, and TLS 1.2 or higher in transit.In progress
Data locationSome processing, including AI model processing, may take place outside India. We say so in our notices and contracts.In place
India-resident or on-premise deploymentNot offered today.Not claimed
ContractsNDA and data-processing terms are signed before any client data is shared.In place
Retention and deletionWe keep client data for the period your contract sets, then return or delete it.Per contract
Fig 7.3One Strategy Twin per client. Engines reach each Twin separately; one client's data cannot be retrieved in another client's work.
Security in detail

DPDP Act

Built for India's DPDP Act

We are building our notices, consent records, rights handling, breach process and retention rules for the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.
Privacy and DPDP in detail
  1. 01

    Notice and consent.

    Itemised notices on our website and in the Readiness Scan. Consent recorded with its purpose and time. Withdrawing consent is as easy as giving it.

  2. 02

    Your rights.

    Ask to access, correct or erase your data using the privacy request form.

  3. 03

    Who is responsible.

    ELAN1 AGENTIC TECHNOLOGIES PRIVATE LIMITED (strategy1 is its brand) is the data fiduciary for data you give this website. For client data in an engagement, the client is normally the data fiduciary and we process it on their behalf, under the engagement letter and our data-processing terms.

  4. 04

    Breaches.

    If a breach affects your data, we will tell you and the authorities as the law requires.

  5. 05

    Grievance officer.

    Hariharan handles data-rights requests, grievances, consent withdrawal and legal notices: hariharan@elan1.ai.

Certifications

What we do not claim

strategy1 holds no security or AI management certifications today. That includes ISO 27001, SOC 2 and ISO 42001. When we hold one, this page will show the certificate, its scope and the auditor.
  • CertificationISO 27001Not claimed
  • CertificationSOC 2Not claimed
  • CertificationISO 42001Not claimed
We will add independent penetration testing results and professional indemnity cover here once they are in place.

FAQ

Questions about data, AI and the DPDP Act

Does strategy1 use client data to train AI models?
strategy1 uses Anthropic's Claude models under commercial terms in which client content is not used to train models without permission; the trust centre labels this control per contract. Each client's Strategy Twin is kept separate, so one client's data cannot be retrieved in another client's work.
Where is client data processed?
Some processing, including AI model processing, may take place outside India, and strategy1 says so in its notices and contracts. India-resident or on-premise deployment is not offered today. NDA and data-processing terms are signed before any client data is shared.
How does strategy1 approach India's DPDP Act?
strategy1 is building its notices, consent records, rights handling, breach process and retention rules for the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. Notices are itemised, consent is recorded with its purpose and time, and you can ask to access, correct or erase your data through the privacy request form.
Who is responsible for my personal data?
ELAN1 AGENTIC TECHNOLOGIES PRIVATE LIMITED, which owns the strategy1 brand, is the data fiduciary for personal data collected through this website. For client data shared in an engagement, the client is normally the data fiduciary and elan1 processes it on the client's behalf. Hariharan, our grievance officer, handles requests at hariharan@elan1.ai.
Does strategy1 hold ISO 27001 or SOC 2?
No. strategy1 holds no security or AI management certifications today, including ISO 27001, SOC 2 and ISO 42001. When it holds one, the trust centre will show the certificate, its scope and the auditor.

Accountability

strategy1 provides decision support and blueprints; licensed professionals sign technical, financial and legal conclusions.

Report a concern

If something here is not true in practice, tell us.

Security issue. Please do not test against client data.

Privacy request or grievance. Our grievance officer, Hariharan, handles these. You can also email hariharan@elan1.ai.

Something on this page looks wrong.

Who operates strategy1

Company
ELAN1 AGENTIC TECHNOLOGIES PRIVATE LIMITED
Brand
strategy1 is a brand of ELAN1 AGENTIC TECHNOLOGIES PRIVATE LIMITED.
Registered office
114, B Block, Second Floor, Sir Theagaraya Road, T Nagar, Chennai 600017, Tamil Nadu, India
Grievance officer
Hariharan, hariharan@elan1.ai. Handles every DPDP and legal matter.
What is it about? (required)

Please do not test against client data.

What you found, where, and how to reproduce it.

Characters used: 0 / 2000

We will use the details you give here to answer your request and, if you ask, to arrange a meeting. ELAN1 AGENTIC TECHNOLOGIES PRIVATE LIMITED (strategy1 is its brand) is the data fiduciary. We keep them for 12 months after our last contact, then delete them. You can ask us to see, correct or delete your data at any time. Read the full notice

How we handle your data
What we collect
Name, work email, organisation, role, phone (if given), what you write and any file you upload.
Why
To reply to you and arrange the work you asked about. Nothing else unless you tick the Review box.
Who sees it
strategy1 staff handling your request. Our service providers, such as hosting and AI model providers, acting for us under contract. We do not sell your data.
Where
Some processing, including AI processing, may happen outside India.
How long
12 months after our last contact. Then it is deleted.
Your rights
Access, correction, completion, erasure, nomination, and withdrawal of consent, as easily as you gave it.
Withdraw or complain
Contact our grievance officer, Hariharan, at hariharan@elan1.ai or through the privacy request form on our Privacy and DPDP page. If you are not satisfied, you may complain to the Data Protection Board of India.
Language
This notice is available in English.

Change log

DateWhat changedWhy
14 Oct 2026Company, grievance officer and data roles namedThe operating company, its registered office and our grievance officer are now confirmed.
10 Oct 2026Trust centre publishedFirst version, ahead of launch.

Check the work before you commit to it.

A 72-Hour Bootcamp starts with an NDA and data-processing terms, before any data changes hands. Fixed scope, fixed fee, exclusive of GST.

Book a 72-Hour BootcampSend an RFP