Purpose
This article describes how VisionAtlas handles executive leadership artifacts — Executive Briefings, AI Summary, and Executive reviews — from a governance and records perspective. It is product documentation, not legal advice. Align your internal policies and Privacy Policy with how your organization uses the Service.
What gets stored
| Artifact | Storage | Typical use |
|---|---|---|
| **Executive review** | Database row per snapshot (`summaryJson`, period dates, created timestamp) | Period archive, delta comparisons |
| **AI insight** | `aiInsight` records (ExecutiveSummary, ThemeDetection) | On-demand and theme runs |
| **Executive briefing** | Briefing + slides + publish status + optional `shareToken` | Weekly deck, share link when published |
| **Audit log** | Admin/security events (separate from review content) | Configuration and access changes |
Customer content (goals, KPIs, updates, narratives) remains customer-owned under the Terms of Service.
Access control
- All three features honor tenant isolation (
companyId) and RBAC permissions. - CanViewExecutiveDashboard — AI Summary and Reviews.
- CanViewExecutiveBriefings (+ publish/share/export) — Briefings.
- Entity visibility (public, department, owner, executive-only) filters what appears in AI-generated content.
For permission matrices, see Roles and permissions.
Share links (briefings)
When a briefing is Published, VisionAtlas may expose a tokenized URL (/share/briefing/<token>) for read-only presentation.
- Treat tokens as confidential — comparable to an unlisted document link.
- Unpublish or rotate by publishing workflow / admin actions as your process requires.
- Share pages do not grant access to the full application or other tenants’ data.
Retention and deletion
- Review snapshots and briefings persist until deleted by authorized users or removed through your company’s offboarding process.
- Audit logs may be purged on a schedule via
POST /api/cron/audit-retention(operator-configured). - VisionAtlas does not provide automatic legal hold or eDiscovery export bundles in-app — export via admin tools, API (KPI scope), or contact privacy@visionatlas.ai for enterprise requests.
AI-generated content
- Narratives and slide text are AI-assisted — humans should review before external distribution.
- Do not submit regulated or highly sensitive personal data you are not permitted to send to configured AI subprocessors (see Privacy Policy).
Procurement FAQ (factual)
| Question | Product behavior |
|---|---|
| Where is data hosted? | Your deployment (typically Azure SQL + App Service) — see security overview in customer onboarding |
| Who can see executive content? | Users with executive permissions and visibility to underlying entities |
| Is there an audit trail? | Admin audit log; review/briefing content is versioned by create/publish timestamps |
| SOC 2 / ISO? | Not claimed unless your vendor completes independent certification |
| DPA available? | Enterprise sales — [sales@visionatlas.ai](mailto:sales@visionatlas.ai) |