What this server is, how it is sourced, what it keeps

Praxis · MarketGraphs · trust · tool manifest 2026-10-29.3

Index

On this page
1	Sourcing	Where the papers come from and the four depths a paper is described at.
2	What we never provide	Signals, positions, paper text, bulk exports, advice.
3	What is logged	What is kept about a call and for how long.
4	Security in force	The protections in force.
5	Free and paid	What a free and a paid account see.
6	Tool manifest	Version, hash and the tool names.

Documents, each on its own page
7	FISD Due Diligence Questionnaire 2024, answered	Word · PDF. The FISD (Financial Information Services Association) vendor questionnaire, 70 questions with the generative AI appendix, every answer in the issuer's form.
8	FISD Trial DDQ 2022, answered	Word · PDF. The shorter FISD form for data under trial, same answers.
9	Vendor tear sheet	Word · PDF. The FISD vendor tear sheet, 71 fields.
10	Data dictionary	Every served field by depth, meanings only.
11	Sub-processors and hosting	The eight companies that handle data for us, and how the server is run.
12	Policies	Material non-public information, personal and confidential information, escalation and incident notice.
13	Notice to authors	What we hold about the authors of indexed papers and how to object.
14	Tool manifest	The seven tools with their full descriptions, version and hash.

Elsewhere, and on request
	On the site	Privacy policy · Terms · Methodology.
	On request from alex@market-graphs.com	Sample: fewer than 100 rows from openly licensed papers, more than three months old. CAIQ Lite (Cloud Security Alliance Consensus Assessments Initiative Questionnaire) self-assessment, under a non-disclosure agreement. Subscription licence, once counsel has reviewed it. Trial agreement with a mutual non-disclosure clause, once counsel has reviewed it.

1. Sourcing

We index papers from open scholarly metadata and read them in full only where the licence allows. The descriptions are our own, every record links to the original, and anything a model helped write is marked. None of it is investment advice.

Each paper sits at one of four depths:

Index: who the paper is and how we classify it.
Summary: what the abstract claims, our tags and one quoted sentence.
Method: how the strategy works, read from the paper where the licence allows. Every value carries a quote of at most 200 characters and its section, is marked sure or unsure with a confidence, and anything missing is listed. Values a model helped with are marked.
Audit: the strategy re-implemented on clean data.

For any paper, the due_diligence tool shows where it came from, under which licence, and whether a model helped.

2. What we never provide

We never provide current signals, weights or positions, rankings or recommendations, a paper's text or embeddings, bulk exports, or investment advice. The "Most complete" sort order arranges papers by the number of disclosures counted in their abstract. It is a count, not a judgement of quality.

3. What is logged

For each tool call we keep one line: the time, your account, the tool, the paper ids, the outcome and how long it took. Those lines stay for 90 days, then only anonymous totals per tool and per paper remain. We never keep your words, your conversation or the model's answers.

Sign-ins and failed sign-ins are kept for 12 months. Saved interests exist only if you save them. A share is a snapshot kept for 90 days, opened only by signed-in members of your organisation, and you can revoke it at any time. To have your data deleted, write to alex@market-graphs.com and we confirm within 30 days.

4. Security in force

TLS (Transport Layer Security) 1.2 or newer only, with HTTP Strict Transport Security (HSTS) on this host.
Sign-in through OAuth 2.0 (WorkOS AuthKit) for every account, free ones included. Tokens never appear in a URL.
Two read-only database roles, one per plan, each with a time limit on every query. A free account's connection cannot read a paid view.
A cap of 120 tool calls a minute per account, and caps per network address at the edge. A capped call tells you so.
The tool manifest is versioned and hashed for every release (below). Any change to a tool changes the hash.
Nightly backups streamed to object storage, with a monthly restore test.
Append-only logs: usage for 90 days, then anonymous totals. Security events for 12 months.
The server runs from the code repository. Every file on the server is listed in a manifest and checked against it.

5. Free and paid

The same tools on both plans. A free account searches the catalogue, every paper from its abstract: its facts, what it discloses, its neighbours, the comparison grid and its provenance, and it can share papers with its team. A paid account searches the papers we read in full and the papers it uploads: how each one works in five lines with a quote under each, every value with its quote, the same lines side by side in a comparison, and the catalogue one move away. What you see depends on your plan, never on who you are.

6. Tool manifest

version 2026-10-29.3 · sha256 b1f752e3b543c50356270d3c5dfaf9ed902cc34ce7af90fa03579e7f7da13ab9

Tools: compare_side_by_side, deep_dive_paper, due_diligence, explore_strategy_idea, get_started, latest_in_my_area, share_with_team. The full descriptions. Any change to a tool changes the hash.

The documents above are reviewed once a year and on any material change. Questions: alex@market-graphs.com.

Not investment advice. · Praxis · MarketGraphs Ltd