How does Opsphere protect data and operations?

Opsphere publishes governance transparency about EU AI Act topics without claiming certification. Customers deploy and operate the platform in their regulatory context.

How are Opsphere security controls maintained?

Read-only-by-default integration posture, human oversight, and evidence-backed investigations are core product principles. Details on inference and subprocessors appear in the Privacy Policy and /subprocessors.

Does Opsphere change production systems?

Opsphere is read-only by default. It queries connected source systems, correlates evidence and recommends next steps; source systems remain authoritative.

GOVERNANCE TRANSPARENCY

EU AI Act and Opsphere

This page explains how Opsphere’s architecture and operating model relate to common EU AI Act governance questions. It is product transparency — not legal advice, certification, or a statement of compliance.

REGULATORY CONTEXT

Where the EU AI Act may apply

The EU Artificial Intelligence Act regulates certain AI systems and obligations for providers and deployers in the European Union. Opsphere is operational intelligence software used by engineering teams; customers decide where and how they deploy it, which integrations they connect, and which actions they take in production.

Customers typically act as deployers for their own operational use cases.
Opsphere does not certify customer deployments or guarantee a particular risk classification.
Read-only integration posture does not automatically exempt a use case from applicable law.

PRODUCT POSTURE

Read-only by default — with nuance

Opsphere queries connected systems for evidence and correlates operational context. Community plans emphasize read-oriented tools; higher plans may allow governed actions when you configure permissions, tenant policy, and explicit approval. AI-assisted analysis in Web Client uses managed inference; MCP flows may use your chosen model provider (Bring Your Own AI).

Source systems remain authoritative for underlying operational data.
Recommendations and investigation output are aids — not unsupervised production changes.
Mutating actions, when available, require your configuration and human decision-making.

HUMAN OVERSIGHT

People stay in control

Opsphere is designed for teams that investigate incidents and changes with human judgment. Investigations surface evidence, confidence, and unknowns; they do not replace incident command, change advisory boards, or legal review.

Teams validate outputs before acting in production.
Tool access is tenant-scoped and auditable.
Enterprise customers can align usage with internal governance processes.

EVIDENCE AND TRACEABILITY

Operational evidence, not black-box automation

Investigations emphasize traceable operational evidence from systems you connect — logs, metrics, deployment signals, and similar sources — rather than opaque automated decisions.

Structured investigations document hypotheses, evidence, and verification steps.
Operational Context and Investigation Memory support continuity without replacing source systems.
We do not claim formal conformity assessment or CE marking for Opsphere.

DATA AND LIMITS

Data processing relevant to AI features

We do not use customer data to train models. Real-time inference for Web Client is a separate processing activity from training. Retention in Opsphere and at inference subprocessors is described in our Privacy Policy and informational subprocessors list.

See Privacy Policy Section 14 for inference flows and anchors.
See /subprocessors for platform providers such as hosting and managed inference.
Enterprise DPA and contractual subprocessors annex available under commercial agreement.

SHORT FAQ

Common questions

Does Opsphere certify EU AI Act compliance?

No. We describe product architecture and data practices; customers assess their deployment context.

Is Opsphere exempt because it is read-only?

No universal exemption is claimed. Read-only posture reduces certain operational risks but does not replace legal analysis.

Where can we get contractual documentation?

Enterprise customers may request a DPA and subprocessors annex. Contact contact@opsphere.io.

Related transparency pages

Opsphere provides operational intelligence software. You decide which systems to connect, which permissions to grant, and which operational actions to take outside the platform. Opsphere helps teams investigate and correlate evidence; it does not replace your incident command, change management, or legal compliance processes.

References to the EU Artificial Intelligence Act on this website describe how our product architecture and data practices relate to common governance expectations. They are not a statement that Opsphere is certified, formally assessed, or exempt from applicable law. Customers remain responsible for determining how they deploy and use Opsphere in their regulatory context.

Enterprise customers may request additional contractual documentation, including a data processing agreement. Contact contact@opsphere.io for commercial and privacy questions.

DIRECT ANSWERS

Key facts about Opsphere and the EU AI Act

A concise, verifiable summary based on the capabilities and operating boundaries described on this page.

How does Opsphere protect data and operations?: Opsphere publishes governance transparency about EU AI Act topics without claiming certification. Customers deploy and operate the platform in their regulatory context.
How are Opsphere security controls maintained?: Read-only-by-default integration posture, human oversight, and evidence-backed investigations are core product principles. Details on inference and subprocessors appear in the Privacy Policy and /subprocessors.
Does Opsphere change production systems?: Opsphere is read-only by default. It queries connected source systems, correlates evidence and recommends next steps; source systems remain authoritative.