---
title: "Agentic Privacy Disclosure"
method: GET
path: "/.well-known/agentic-disclosure.json"
tags: ["Compliance", "Privacy"]
---

# Agentic Privacy Disclosure

`GET /.well-known/agentic-disclosure.json`

## Request

- Base URL: `https://riskmodels.app`
- URL: `https://riskmodels.app/.well-known/agentic-disclosure.json`
- Auth: none required

Comprehensive data handling and privacy disclosure for AI marketplace compliance. Documents encryption, retention, third-party sharing, and regulatory compliance.
**Discovery URL:** Served at the **site origin** (`https://riskmodels.app/.well-known/agentic-disclosure.json`), not under `/api`.

**Key sections:**
- Data handling (AES-256-GCM, GCP KMS)
- Cryptographic shredding for GDPR compliance
- Third-party sharing policy (none)
- AI model usage (no training on user data)
- Compliance (GDPR, SOC2, PCI-DSS)

## Response `200`

Privacy disclosure document

- object
  - `service` object
  - `data_handling` object
  - `compliance` object
  - `security` object
  - `transparency` object

---

[API](https://skmtc.dev/riskmodels/apis/riskmodels-api.md) · [All operations](https://skmtc.dev/riskmodels/apis/riskmodels-api/llms.txt) · [OpenAPI document](https://skmtc.dev/riskmodels/apis/riskmodels-api/revisions/1a034cad408a?raw)