This policy covers the websites and products operated by Anvil Defense Systems LLC (“Anvil,” “we”) — anvilarsenal.com, anvilpropulsion.com, and the Anvil Passport service.
Our websites
Our marketing sites use Cloudflare Web Analytics, which is cookieless and does not identify or track you across sites. If you email us, we keep the correspondence.
What we collect — Anvil Passport
- Account information — name, work email, and password (stored as a one-way hash).
- Your organization’s supply-chain records — parts, materials, suppliers, lots, documents, and screening results you enter or upload. This is your organization’s data; we treat it as sensitive business information.
- Access requests — if you ask for access, the name, email, company, team size, and message you submit.
- Operational logs — sign-ins and changes to your organization’s records are written to your organization’s own audit log (that log is a product feature and belongs to your organization).
How we use it — Anvil Passport
To operate the Service, respond to access requests, and secure the platform. Access-request submissions are forwarded to our own workflow tooling (currently Make.com) so we can respond — that’s the only routine sharing with a third-party processor. We do not sell data, run third-party advertising or analytics trackers, and we use cookies only for your sign-in session.
Isolation and security
Each customer organization’s data is isolated — enforced in the application and again at the database with row-level security. Passwords are hashed with argon2id; sessions are server-side and revocable; changes are recorded in a tamper-evident audit log. Data is hosted in the United States.
Retention and deletion
Organization data is retained while your account is active. On request we will export or delete your organization’s data; audit records are append-only by design and are removed with the organization as a whole.
Contact
Privacy questions or requests: legal@anvilarsenal.com.