Pragatix Privacy Policy

Please read the privacy policy carefully before using Pragatix by AGAT Software
Development LTD.

Copyright ©2026, AGAT Software Inc. All rights reserved.
57 Hagefen street, Aseret, Israel

No part of this document may be reproduced or transmitted in any form or by any means,
electronic or mechanical, for any purpose, without the express written permission of AGAT
Software Inc. Under the law, reproducing includes translating into another language or format.

As between the parties, AGAT Software Inc., retains title to and ownership of all proprietary
rights with respect to the software contained within its products. The software is protected by
Israeli copyright laws and international treaty provision. Therefore, you must treat the software
like any other copyrighted material (e.g., a book or sound recording).

Every effort has been made to ensure that the information in this document is accurate. AGAT
Software Inc. is not responsible for printing or clerical errors. Information in this document is
subject to change without notice.

Disclaimer

While AGAT uses reasonable efforts to include accurate and up-to-date information in
this document, AGAT makes no warranties or representations as to its accuracy. AGAT
assumes no liability or responsibility for any typographical or other errors or omissions
in the content of this document.

Limitation of Liability

AGAT and/or its respective suppliers make no representations about the suitability of
the information contained in this document for any purpose. Information is provided “as
is” without warranty of any kind and is subject to change without notice. The entire risk
arising out of its use remains with the recipient. In no event shall AGAT and/or its
respective suppliers be liable for any direct, consequential, incidental, special, punitive,
or other damages whatsoever (including without limitation, damages for loss of
business profits, business interruption, or loss of business information), even if AGAT
has been advised of the possibility of such damages.

Introduction

AGAT's Pragatix is a security-first AI platform that enables enterprise-generative AI
services with on-premises deployment & public AI Governance.
Pragatix offers three types of solutions:

• AI Security Suite – for organizations that want to use public AI while maintaining
full control.
• Private/On-prem AI Suite - For companies that do not want to risk any data
exposure.
• Behaviour Intelligence – For executive visibility into AI adoption, ROI, and
security.

AI Security Suite:

The Security Suite provides end-to-end protection across human interactions, AI
agents, models, and data, covering SaaS, homegrown applications, endpoints, and
developer IDEs.

The main capabilities include:
• Prompt Guardian is a real-time governance for public AI services such as
ChatGPT, Copilot, and Claude.
• Guardian Agent governs AI agents and tool activities via an AI Gateway for realtime policy enforcement. Additionally, the Guardian agent provides discovery
and enforcement of AI Agents using Network Proxy, Browser Extensions, API, and
endpoint agents
• Model Guardian includes a Risk Engine that evaluates AI models using source
intelligence and static & Dynamic Red Teaming dynamic red teaming for
vulnerability assessments.
• AI Gateway enables developers and applications to securely access both
internal and external AI services through a governed gateway that delivers full
visibility, control, and cost and consumption management.
• End Point Defender- Secures Agents on the endpoint, such as IDE assistants
(Github Copilot, cursor..) or other third-party like OpenClaw and OpenCode.
• Security Awareness - Provides visibility into AI usage to detect risks and deliver
targeted, real-time, in-context training directly within tools like ChatGPT.
The AI Security Suite enforces risk-based policies, classifies data sensitivity, and
provides full visibility into both enterprise and shadow AI usage, while delivering built-in
security controls against major OWASP AI threats, including prompt injection, data
leakage, and model abuse.

Private AI Suite:

The AI Suite is an end-to-end, enterprise-ready local / on-prem AI platform
It ensures zero data exposure through flexible deployment options, ranging from fully
air-gapped (no-internet) environments to private cloud and full SaaS deployments.
By connecting to a wide variety of data sources such as documents, websites, and
databases, Pragatix’s Private AI delivers the following core capabilities:

• Knowledge Assistant - Generate answers from all company-connected sources
and pre-trained knowledge, preserving source permissions and grounding
answers to your data.
• Data analysis - Using natural language, perform complex data analysis on Excel
and databases.
• Smart search - Search all your content beyond Keyword Matching. Understand
the intent and context.
• AI Agents - Run AI agents to plan and perform tasks using Python code, such as
internet search, image analysis, speech to text. Integrate with MCP servers and
expose the platform as an MCP server.
• Workflow builder - Build workflow using no-code drag and drop, calling AI
Agents and other AI services
• Log analysis- Ingest logs, classify and structure data, visualize, and apply realtime anomaly detection.
• Data Extraction - Capture, classify, and extract information from unstructured or
semi-structured documents for IDP- Intelligent Document Processing.
• Document Translation- Translate documents preserving original layout and
formatting
• Anomaly Detection - Identify anomalies in data, such as logs
• AI Code Assistant - Code completion, error detection, code generation, and
answering questions from the company codebase
• Data Classification - Automatically classify data based on existing data.
• AI router- Smart route AI prompts to cloud and on-prem multi-model services

Behavior intelligence (security & Adoption)

The Behavioral Intelligence module provides real-time visibility into how employees use
AI tools across the organization, identifying risky activities such as sharing sensitive
information, unsafe agent usage, or policy violations. By analyzing actual user behavior
and prompt activity, the platform delivers measurable insights into AI risk exposure and
usage patterns. When risky actions occur, employees receive immediate, in-context
feedback and micro-training to help them correct their behavior in the moment. This
approach transforms AI security from static policy enforcement into continuous
learning—reducing risk while improving employee awareness and responsible AI usage.

AI Behavior Intelligence (Adoption Intelligence)

Pragatix AI Behavior Intelligence enables organizations to improve productivity by
measuring and optimizing employee interactions with AI across the enterprise.
The platform delivers enterprise adoption dashboards with role-based visibility for
managers and executives, tracking adoption trends across departments and over time.
It provides deep insight into AI usage and user intent, automatically classifying how AI is
applied in real business workflows and identifying high-value use cases that can be
replicated and scaled.

With full AI service visibility, organizations can monitor which AI tools and platforms are
being used—across both approved and public services—and understand crossplatform usage patterns.

Through adoption benchmarking and enablement, the platform identifies topperforming users and AI champions, as well as teams that require additional support. It
delivers personalized insights, performance-based guidance, and continuous progress
reporting to improve how employees use AI.

By combining measurement, visibility, and targeted enablement, organizations can
continuously improve human-AI interactions—driving higher efficiency, better
outcomes, and clear, measurable ROI from AI adoption.

identify power users who are getting the most out of generative AI features. These
users could have generative AI tips, best practices, and workflows that can be
shared with others in your organization.
Identify users with low adoption rates who might benefit from training and other
materials related to generative AI.

Who We Are

AGAT has been a trusted provider of UC compliance solutions to highly secure and
regulated enterprise companies.
Expanding our expertise, AGAT now offers Pragatix, a cutting-edge AI solution ensuring
the secure and responsible use of Generative AI. Pragatix includes an AI Firewall and AI
Suite solution offering knowledge chatbot, Data analysis and search capabilities.
Information We Collect

a. Personal Information User information: Name, email address, and username for account access via Single Sign-On (SSO).
b. Corporate Data As the nature of the AI Suite module is to analyze you company data, it has access to any data you connect which includes

Uploaded Documents: Files and documents you upload to Pragatix.
Integrated Services: Access to your Google Drive, Gmail, SharePoint , Confluence
and other integrated services.
Corporate Communications: Emails and other communications accessed through
integrations.
The Private AI has all the content of the data you connect to be able to answer questions
from your data.
For user who use only the AI Firewall, the only data stored is the data involved in the AI
interaction which includes the prompt text , any files sent with the prompt text and the
response.
The Firewall collects all data of the AI services configured which includes ChatGPT,
Copilot and Gemini.

c. Technical Data
Usage Data: Information about how you interact with Pragatix, including IP addresses,
browser type, operating system, and device information.
Log Data: Server logs, error reports, and other diagnostic information.

How We Use Your Information

We utilize the collected data for the following purposes:
• Service Provision: To operate, maintain, and improve Pragatix services.
• Personalization: To tailor the chatbot experience based on your corporate data
and user interactions.
• Management: To facilitate connections with integrated services like
Google Drive and Gmail.
• Security: To protect against unauthorized access, data breaches, and other
security threats.
• Compliance: To comply with legal obligations and enforce our terms and
policies.

Communication: To send updates, notifications, and respond to inquiries.
We do not use your information to develop, improve, or train AI and/or ML models.

Data Storage and Security

a. Storage
• SaaS Deployment: Data is stored on our secure cloud servers, utilizing industry
standard encryption both in transit and at rest.
• On-Premises Deployment: Data is stored on your organization’s servers, with
Pragatix providing the necessary tools and guidelines to ensure data security.
When choosing a self-hosted / on prem deployment, AGAT has not access to
your data.

b. Security Measure
• Encryption: All data transmitted between your systems and Pragatix is
encrypted using SSL/TLS protocols.
• Access Controls: Strict access controls are in place to ensure that only
authorized personnel can access your data.
• Regular Audits: We conduct regular security audits and vulnerability
assessments to maintain the integrity of our systems.
• Compliance certification – AGAT has SOC2 type 2 security certification

c. Securing Your Data
All data is encrypted in transit to and from the Internet, mitigating the risk of third parties
accessing it. We store data in data centers around the globe in accordance with the
needs of our customers. If needed, we offer a specific location for our SaaS depending
on AWS availability in that country. We also offer an on-premises deployment that keeps
our customers’ data 100% secure and private according to their internal security
guidelines.

Authentication and Access
Single Sign-On (SSO): Pragatix utilizes Single Sign-On (SSO) for user authentication. We
do not collect or store user passwords. Instead, authentication is managed through
your organization’s chosen SSO provider, ensuring secure and streamlined access to
our services.

Note that in the demo environment there is an option to create a local user in which we
store the hash of your password.

Data Sharing and Third Parties

We do not share your personal or corporate data with any third parties. Your data is
solely used to provide and enhance the Pragatix services you have subscribed to. We do
not sell, rent, or lease your data to any external entities.

Third-Party Integrations

Pragatix integrates with various third-party services such as Google Drive and Gmail. By
enabling these integrations, you grant Pragatix access to specific data from these
services to enhance functionality.

• Access and Use: We access and process data from the service solely to provide
the chatbot functionalities you have enabled. This includes reading, storing, and
analysing your data to allow the chatbot to understand and respond based on
your corporate data.
• Storage: Data accessed from the services is stored securely in accordance with
our Data Storage and Security policies. We ensure that this data is encrypted
both in transit and at rest.
• No Sharing: We do not share any data accessed from the services with third
parties. Your service data is used exclusively to deliver the intended services
within Pragatix.
• Limited Use Compliance: Our use of the user data is limited to the practices
disclosed in this Privacy Policy and conforms with standard compliance
regulation.

We do not use your data for any purposes beyond providing and improving
Pragatix services.

Cookies and Similar Technologies

a. What Are Cookies?
Cookies are small text files placed on your device by websites you visit. They are widely
used to make websites work more efficiently and to provide information to the owners of the
site.

b. Types of Cookies We Use
• Essential Cookies: These cookies are necessary for the basic functioning of
Pragatix. They enable core functionalities such as security, network
management, and accessibility.
• Functional Cookies: These cookies allow Pragatix to remember choices you
make (such as your language preference) and provide enhanced, more
personalized features.

c. How We Use Cookies

• Authentication: Cookies help maintain your authenticated session as you
navigate through Pragatix.
• Customization: Cookies enable us to remember your preferences and settings,
providing a more personalized experience.

d. Third-Party Cookies
Pragatix does not share your data with third parties. We do not use third-party cookies
for analytics or other purposes. If you encounter any third-party cookies while using
Pragatix, they are governed by the privacy policies of those third parties, and we are not
responsible for their practices.

e. Managing Cookies
You have the right to decide whether to accept or reject cookies. You can adjust your
browser settings to refuse all cookies or to indicate when a cookie is being sent.
However, please note that some parts of Pragatix may not function properly if cookies
are disabled.

For more information on how to manage cookies, please refer to your browser’s help
documentation.

User Rights

You have the following rights regarding your data:
• Access: Request access to the data we hold about you.
• Rectification: Request corrections to inaccurate or incomplete data.
• Deletion: Request the deletion of your data, subject to legal and contractual
obligations.
• Objection: Object to the processing of your data for certain purposes.
Please note that we do not offer data portability. This means you cannot request the
transfer of your data to another service provider through our platform. To exercise these
rights, please contact us using the information provided in the Contact Us section.

Data Retention

We retain your data for as long as necessary to provide Pragatix services, comply with
our legal obligations, resolve disputes, and enforce our agreements. Specifically, after
30 days of decommissioning the service, personal data will be deleted. The specific
retention periods may vary based on the type of data and its intended use.

Children’s Privacy

Pragatix is intended for business and organizational use and is not directed to children
under 13 or below the applicable age of digital consent. AGAT does not knowingly
collect personal information from such children. If we learn that we have collected such
information, we will take reasonable steps to delete it.
Users aged 13 to 17 may use Pragatix only where permitted by their organization and
applicable law, and where any required parent, guardian, school, or organizational
authorization has been obtained.

Choices of AI Engine

Organizations using Pragatix can select between public AI engines (e.g., OpenAI) and
private AI engines (e.g., Llama3.1).
Public AI Engines: If you choose to use a public AI engine, your data may be processed
by the chosen AI provider. We ensure that such providers comply with relevant data
protection regulations and that the use of your data is limited to the purposes disclosed
in this Privacy Policy.

Private AI Engines: Selecting a private AI engine ensures that your data is processed
solely within your infrastructure and is not shared with any third parties.
Compliance with Google Requirements
Pragatix complies with Google’s policies regarding the access and use of Google user
data. Specifically:
• Disclosure: This Privacy Policy discloses how Pragatix accesses, uses, stores,
and does not share Google user data.
• Limited Use: Our use of Google user data is strictly limited to the functionalities
described in this policy. We do not use Google data for any additional purposes
outside of providing and enhancing Pragatix services.
By integrating with Google services, we ensure that all interactions and data handling
comply with Google’s User Data Policy and respect user privacy and data security.

Confidentiality

In connection with all AGAT products, the Receiving Party may be given or have access
to certain confidential information of AGAT Software or third parties (collectively,
“Confidential Information”). Confidential Information includes, but is not limited to,
information regarding the organization, operations, programs, activities, policies,
procedures, practices, financial condition, trade secrets, membership lists, and
standards of AGAT Software, its members, or third parties. Confidential Information also includes unpublished or pre-release versions of AGAT Software standards, white papers, and other internal-use or limited circulation documents and information.
The Receiving Party agrees not to disclose or permit the disclosure of any Confidential
Information without the prior written consent of AGAT Software. The Receiving Party
further agrees to use Confidential Information solely for the purpose of using Pragatix
services and not for any personal or third-party benefit.
Disclaimer
While AGAT uses reasonable efforts to include accurate and up-to-date information in
this document, AGAT makes no warranties or representations as to its accuracy. AGAT
assumes no liability or responsibility for any typographical or other errors or omissions
in the content of this document.

Limitation of Liability

AGAT and/or its respective suppliers make no representations about the suitability of
the information contained in this document for any purpose. Information is provided “as
is” without warranty of any kind and is subject to change without notice. The entire risk
arising out of its use remains with the recipient. In no event shall AGAT and/or its
respective suppliers be liable for any direct, consequential, incidental, special, punitive,
or other damages whatsoever (including without limitation, damages for loss of
business profits, business interruption, or loss of business information), even if AGAT
has been advised of the possibility of such damages.

Disclaimer of Warranties

AGAT Software Inc. does not guarantee that Pragatix will be error-free or uninterrupted.
The services are provided on an “as is” and “as available” basis without any warranties
of any kind, either express or implied, including but not limited to warranties of
merchantability, fitness for a particular purpose, or non-infringement.

Changes to Our Privacy Policy

We reserve the right to change this privacy policy at any time. Any changes will be
effective immediately upon posting the revised policy on our website. We encourage
you to review this Privacy Policy periodically for any updates or changes.
International Data Transfers
Your data may be transferred to and processed in countries outside of your residence.
We ensure that such transfers are conducted in accordance with applicable data
protection laws and that appropriate safeguards are in place to protect your data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices
or legal requirements. We will notify you of any significant changes by posting the new
policy on our website and updating the “Last Updated” date.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data
practices, please contact us at:
• For Security and Privacy Concerns: sales@agatsoftware.com
• For Technical Support: support@agatsoftware.com
• For General Information: sales@agatsoftware.com
• For Questions and Comments about this Privacy
Policy: support@agatsoftware.com