> For the complete documentation index, see [llms.txt](https://gaea-2.gitbook.io/gaea-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://gaea-2.gitbook.io/gaea-docs/getting-started/quickstart/8.-security-and-privacy.md). # 8. Security and Privacy **Principles:** privacy by default; device-first feature extraction; minimal disclosure; revocability; verifiable processes via GAEA Certification and VCs; regional compliance and minimal retention. **Data classes:**\ A (high sensitivity): wearable physiology and raw voice — default on-device only.\ B (medium): on-device emotional features/summaries; session-level EMOCOORDS.\ C (low): task metadata, evaluation metrics, anonymized usage statistics.\ D (public): public documents, certification standards, audit abstracts. Consent: one-time with fine-grained reuse; rotating anonymous device IDs; minimal persona disclosure; restrictions for minors/sensitive scenarios; human-in-the-loop for finance, medical, and public matters. Lifecycle: on-device preprocessing, liveness and anomaly filtering, explicit consent → TLS1.3+ transport with certificate pinning → partitioned encrypted storage (A/B with KMS/HSM) → least-privilege temporary tokens; immutable audit logs → region-specific TTL; revocation triggers removal and model stop; data portability; provenance and version tracking; model/data unlearning support. Device/edge/cloud security: secure boot/firmware, anti-tamper, staged OTA; wearables upload features/summaries only; edge aggregation with rate limit and isolation; cloud RBAC/ABAC, zero trust, key rotation, hash-chained audit; SDK sandbox with least privilege and behavioral auditing. Privacy technology and verifiable execution: ZK proofs for sensitive compute, certification, and settlement abstracts with selective disclosure; FL + DP; TEE with remote attestation; exploration of ZKML; VC for EC grades, validity, boundaries, and CRLs. Licensing and revocation: LAT/MLN objects for dataset/model licensing with expiry and revocation; machine-verifiable policies for subject/place/object/time/purpose; unified CRL queries; immediate stop and removal on withdrawal. Model security: poisoning/backflow defenses; robustness evaluation with adversarial sets; anti-exfiltration and anti-inference controls (response compression, confidence clipping, output perturbation, rate limits); policy guardrails. Audit and transparency: end-to-end logs; third-party audits; public dashboards for EC distributions, CRL rates, revocation SLAs, and privacy incidents (de-identified). Incident response uses P0–P3 levels. Data subject rights SLAs cover access/export, correction/restriction, deletion/withdrawal, and appeals. Compliance mapping includes GDPR/CCPA/PIPL/PDPA/UK GDPR. Data subject requests (SLAs & verification)
Request typeResponse timeCompletion deadlineVerification methodNotes
Data deletionAcknowledge within T+72hComplete within T+14 daysVC proof / audit logsEmergency fast-track available
Model unlearningSchedule within T+72hComplete within T+30 daysDifferential impact assessmentImpact report receipt
Access & portabilityImmediate / <=72hImmediate / <=7 daysPortable formatAPI / download link
Withdraw consentTakes effect immediatelyComplete within <=24hKey revocation / policyGradual propagation
Region / regulation compliance mapping
Region / lawData residencyCross-border mechanismData subject rightsRetentionLegal basis
EU / GDPRIn-EEASCC / DPAAccess / rectification / erasure / portabilityShortest necessaryLegitimate interests / consent
US / CCPA / CPRAIn-state preferredDPA / Terms of serviceNotice / opt-out of saleShortest necessaryContract / consent
China / PIPL & CSLIn-country storageSecurity assessmentAccess / rectification / erasureShortest necessaryStatutory / consent
Singapore / PDPALocal-preferredTransfer agreementAccess / rectificationShortest necessaryConsent / legitimate interests
UK / UK GDPRIn-UKIDTA / SCCAccess / erasure / restriction of processingShortest necessaryLegitimate interests