From bf9d43ac8387601e2340f37dc4afc72a0c9da8b9 Mon Sep 17 00:00:00 2001 From: Imran Siddique Date: Thu, 16 Jul 2026 16:39:59 -0700 Subject: [PATCH] docs: add PRIVACY.md --- PRIVACY.md | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 PRIVACY.md diff --git a/PRIVACY.md b/PRIVACY.md new file mode 100644 index 0000000..aebe36a --- /dev/null +++ b/PRIVACY.md @@ -0,0 +1,11 @@ +# Privacy + +cMCP is a self-hosted gateway that you deploy and operate. agentrust-io and OPAQUE run no service on your behalf and receive no data from your deployment: cMCP sends no telemetry, analytics, or usage data to us. + +What cMCP processes: as an MCP gateway, cMCP handles the MCP requests and responses that pass through it in order to enforce policy and produce attestation. This traffic is processed inside the trusted execution environment (TEE) you run and is governed by your own configuration and your privacy commitments to your users. cMCP is designed so that a privileged operator cannot silently exfiltrate this data. + +What cMCP records: cMCP can emit signed TRACE records (metadata such as model, policy hash, data class, and tool-call digests) to the destinations you configure. It writes only what your policy specifies, where you specify. + +As the operator, you are the data controller for traffic through your cMCP deployment. This notice describes the software's behavior, not a hosted service. + +Questions or corrections: https://github.com/agentrust-io/cmcp/issues