# 3Dogs Trust Center

Updated: 2026-08-18

Enterprise trust is not a badge wall. This local candidate separates current first-party statements, governing links, contractual terms, targets and open gaps. It is not an independent audit, certification or production-readiness result.

## Dated procurement evidence index

Reviewed 2026-08-18. “Reviewed” means the cited candidate or policy reference was inspected; it does not prove deployment, control operation, certification, conformance, transaction completion or customer outcome. Candidate status: `CANDIDATE_NOT_DEPLOYED`.

| Evidence | Current bounded statement | Status and scope | Source and review | Independent verification and next action |
|---|---|---|---|---|
| `trust.candidate-state` | This record describes a local candidate, not a deployed service. | `CANDIDATE_NOT_DEPLOYED`; whole candidate | First-party candidate; reviewed 2026-08-18 | No; reconfirm against deployed bytes |
| `legal.terms` | Terms v1.0 was observed with effective date 2026-06-24; current Terms at authorization govern. | `PUBLISHED_POLICY_REFERENCE`; direct service | [Terms](https://app.3dogs.ai/terms); effective 2026-06-24; reviewed 2026-08-18 | No; review current Terms before authorization |
| `legal.seller-identity` | “3Dogs Nexus” is the public seller/product name; the registered contracting legal name is not publicly verified. | `REQUIRES_PROCUREMENT_CONFIRMATION`; contracting | Public candidate; reviewed 2026-08-18 | No; confirm legal entity in order documents or MSA |
| `privacy.training` | 3Dogs states it does not train models on customer case content; provider-specific processing terms still govern. | `FIRST_PARTY_STATEMENT`; customer content | [Privacy policy](https://app.3dogs.ai/privacy); policy date `UNAVAILABLE`; reviewed 2026-08-18 | No; validate provider and deployment terms |
| `privacy.retention` | Candidate summary: history retained while an account is active and deleted or anonymized within 30 days after cancellation or closure, subject to policy exceptions. | `POLICY_SUMMARY_RECONFIRM`; public service | [Privacy policy](https://app.3dogs.ai/privacy); policy date `UNAVAILABLE`; reviewed 2026-08-18 | No; reconfirm live policy |
| `privacy.zero-retention` | Zero retention is not the default; it exists only when expressly negotiated for Enterprise. | `NEGOTIATED_ONLY`; Enterprise option | First-party candidate; reviewed 2026-08-18 | No; put exact duties in signed scope |
| `privacy.subprocessors` | A complete deployment-specific provider and subprocessor register is not public. | `UNAVAILABLE`; deployment-specific | Source URL `UNAVAILABLE`; reviewed 2026-08-18 | No; request the deployment-specific list |
| `privacy.dpa` | Public self-service DPA availability and controller/processor roles are not established. | `UNAVAILABLE`; legal/privacy | Source URL `UNAVAILABLE`; reviewed 2026-08-18 | No; confirm roles and agreement in writing |
| `security.certifications` | 3Dogs does not publicly claim SOC 2, ISO 27001, FedRAMP, CMMC or HIPAA certification; absence of a claim is not proof none exists. | `NOT_CLAIMED`; organization | First-party candidate; reviewed 2026-08-18 | No; request current evidence if required |
| `security.contact` | A security contact is published. | `PUBLISHED_CONTACT`; reporting path | [`security.txt`](/.well-known/security.txt); reviewed 2026-08-18 | No runtime delivery test; verify handling during diligence |
| `security.incident-sla` | No public incident-response SLA is claimed. | `UNAVAILABLE`; incident response | Source URL `UNAVAILABLE`; reviewed 2026-08-18 | No; negotiate if required |
| `security.uptime-sla` | No public uptime SLA is claimed. | `UNAVAILABLE`; service availability | Source URL `UNAVAILABLE`; reviewed 2026-08-18 | No; negotiate if required |
| `security.control-operation` | Public pen-test cadence, current audit report and operating-control evidence are not supplied by this candidate. | `UNAVAILABLE`; security controls | Source URL `UNAVAILABLE`; reviewed 2026-08-18 | No; request dated artifacts |
| `deployment.options` | Enterprise deployment and isolation options are described but require deployment-specific validation and signed scope. | `REQUIRES_DEPLOYMENT_VALIDATION`; Enterprise | [Enterprise](/enterprise/); reviewed 2026-08-18 | No; validate architecture, providers, region and responsibilities |
| `accessibility.target` | WCAG 2.2 AA is a target, not a conformance claim. | `TARGET_ONLY`; public candidate | [Accessibility statement](/accessibility/); reviewed 2026-08-18 | No; request current accessibility testing |
| `performance.field-data` | No public field-performance claim exists; p75 LCP, INP and CLS evidence is required. | `NOT_MEASURED`; public website | Field dataset `UNAVAILABLE`; reviewed 2026-08-18 | No; supply field data before claiming performance |
| `ai.method` | Product-method statements are first-party descriptions, not proof of accuracy, fairness, independence or statistical calibration. | `FIRST_PARTY_STATEMENT`; Nexus method | [Method](/method/); reviewed 2026-08-18 | No; review run-bound evidence |
| `commerce.agent-purchase` | Public agent actions stop at a nonbinding catalog continuation; a human must authenticate, review Terms and authorize payment. | `PUBLISHED_BOUNDARY`; direct channel | [Pricing catalog](/pricing.json); reviewed 2026-08-18 | No transaction test; require state-specific seller evidence |
| `commerce.checkout` | Fresh buyer checkout, payment, entitlement, receipt, cancellation execution and refund execution are not proved. | `NOT_MEASURED`; buyer lifecycle | Runtime evidence `UNAVAILABLE`; reviewed 2026-08-18 | No; run bounded buyer-lifecycle acceptance tests before promotion |
| `evidence.case-library` | Candidate bytes contain classified first-party case records and preserved artifacts; preservation is not independent validation. | `VERIFIED_CANDIDATE_BYTES`; case library | [Case studies](/case-studies/); reviewed 2026-08-18 | No independent validation; evaluate each classification and limitation |

## Customer-content training

3Dogs states that it does not train models on customer case content. This candidate does not independently verify that statement or describe every provider's processing policy; deployment-specific provider terms still matter.

## Retention and deletion

This candidate summarizes the linked Privacy Policy as retaining case history while an account is active and deleting or anonymizing it within 30 days after cancellation or closure, subject to stated legal, security and verified-request exceptions. Reconfirm the live policy before purchase. Zero retention is an Enterprise option only when expressly negotiated; it is not the default public policy.

Privacy: https://app.3dogs.ai/privacy

## Certifications

3Dogs does not currently claim SOC 2, ISO 27001, FedRAMP, CMMC or HIPAA certification. Cloud-provider certifications are not 3Dogs certifications.

## Agent and purchase authority

Public agent resources are read-only or nonbinding unless a specific runtime proves otherwise. No public agent path may accept terms, charge a payment method or establish purchase without verified authority and a seller receipt. A fresh normal-buyer checkout has not been proved end to end in this candidate.

## Data flow, deployment and subprocessors

3Dogs can route analysis across models served through major cloud providers. A specific case should use only the providers, regions, connectors and retention controls permitted by its account or signed engagement.

- Public service: governed by the current Privacy Policy, Terms of Service and Security page.
- Enterprise: managed, dedicated, customer-cloud, on-premises and air-gapped designs are described as options, subject to validation.
- Subprocessors: model, cloud, hosting and payment providers may be involved depending on the service path. This candidate does not yet publish a complete deployment-specific subprocessor register; request the applicable list during procurement.
- DPA: no public self-service DPA availability claim is made here. Confirm agreement and controller/processor roles in writing.

## Product and commercial truth

Nexus is the overarching strategic-intelligence product. Pointer measures and documents website and agent readiness. Bloodhound is deal intelligence. Malamute is the multi-model work harness. A result or score from one product is not proof of another product's accuracy, commercial outcome or transaction state.

Professional and Corporate subscriptions recur and auto-renew monthly or annually until canceled. Cancellation takes effect at the end of the current paid term. Except where required by law or expressly agreed in writing, fees are non-refundable and are not prorated. Review the current Terms at https://app.3dogs.ai/terms before continuing.

The public site can compare plans and prepare an exact seller-controlled continuation. A human must authenticate, review terms and authorize any charge. The continuation creates no account, order, subscription, terms acceptance or payment, and this candidate does not prove that a fresh normal buyer can complete checkout. A seller-controlled checkout state proves only that checkout started; verified seller payment state, entitlement and a seller receipt are required to claim purchase.

## Security and incident reporting

Security reports should follow https://3dogs.ai/.well-known/security.txt. This page does not invent a public incident-response time, uptime SLA, penetration-test cadence, audit report or vulnerability-disclosure safe harbor.

Security: https://app.3dogs.ai/security

In-perimeter deployment may place data inside a customer-controlled environment, but architecture must be validated. It does not eliminate application, model, connector, identity, logging, supply-chain or human-process risk.

## Accessibility and performance

The candidate targets WCAG 2.2 AA and good Core Web Vitals, but a target is not a conformance statement or field-performance result. See the dated Accessibility statement: https://3dogs.ai/accessibility/

Performance claims require field data at the 75th percentile. Local lab measurements are regression evidence only. No public uptime or response-time SLA is claimed unless it appears in signed terms.

## AI governance and evidence

3Dogs states that Nexus separates model positions, forces challenge, caps confidence when evidence is weak and prints minority reasoning. Those first-party method claims can make a recommendation easier to inspect; they do not independently prove accuracy, fairness, completeness or suitability.

- Demonstrations and historical analyses must be labeled.
- Anonymized or composite engagements are first-party evidence, not named-customer proof.
- Independent corroboration is stronger than a self-scored test; self-measured evidence remains labeled.
- A human remains responsible for decisions, releases, communications, purchases and regulated judgments.

## Procurement checklist

Confirm the model/provider list, regions, data flow, retention, deletion, access control, logging, incident commitments, support, exit process, accessibility, business continuity, DPA, subprocessors, contract authority and exact certification gaps before relying on the service.

- Machine-readable status: https://3dogs.ai/trust.json
- Enterprise briefing: https://3dogs.ai/enterprise/#briefing
- Contact: https://3dogs.ai/contact/