Legal Documentation
By ApMoSys Product Private Limited • Last updated: June 30, 2026
This Privacy Notice explains how ApMoSys Product Private Limited ("APPPL", "ApMoSys", "Company", "we", "our", or "us") collects, processes, stores, protects, and manages information through ShieldVUE®, an enterprise Software Supply Chain Security and Governance Platform.
ShieldVUE® enables organizations to discover software components, generate and manage Software Bills of Materials (SBOMs) and Cryptography Bills of Materials (CBOMs), identify software vulnerabilities, monitor cryptographic assets, enforce governance policies, support regulatory compliance, and provide enterprise-wide software supply chain visibility.
ShieldVUE® is a proprietary software platform owned by ApMoSys Product Private Limited and supported by ApMoSys Technologies Private Limited.
To provide, secure, and continuously improve ShieldVUE services, we may collect the following categories of information.
ShieldVUE collects operational information necessary for platform administration, governance, and security monitoring, including:
During software discovery and analysis, ShieldVUE may process metadata related to customer software assets, including:
ShieldVUE analyzes software metadata solely for software supply chain visibility and governance purposes.
To provide vulnerability intelligence, ShieldVUE may process:
Where CBOM capabilities are enabled, ShieldVUE may identify and catalog:
ShieldVUE does not access or store customer encryption keys or confidential cryptographic secrets unless explicitly configured as part of an approved deployment.
For platform security and operational purposes, we may collect:
Customers may upload or connect software-related information including:
Information collected through ShieldVUE may be processed for the following legitimate business purposes:
Customers retain full ownership of all customer-provided information processed within ShieldVUE, including but not limited to:
ApMoSys acquires no ownership rights over customer data except as necessary to provide contracted services and fulfill platform operations.
Where AI-powered capabilities are available within ShieldVUE, information such as software metadata, vulnerability insights, governance recommendations, compliance observations, prompts, inputs, generated outputs, and associated metadata may be processed solely to deliver requested platform functionality and improve customer experience.
Customer information is not used to train publicly available Artificial Intelligence models without explicit written customer authorization.
ShieldVUE is designed with security-by-design principles and employs industry-standard security controls to protect customer information. Security measures include:
Information processed by ShieldVUE is retained only for legitimate:
Retention periods may vary based on customer agreements, applicable laws, or organizational policies.
ApMoSys does not sell, rent, or commercially distribute customer information. Information may be disclosed only under the following circumstances:
Where customer deployments involve multiple geographic regions or cloud environments, information may be processed in accordance with applicable contractual commitments and relevant data protection regulations.
Appropriate safeguards are implemented to protect customer information during cross-border processing where applicable.
Customers are responsible for:
ApMoSys may update this Privacy Notice periodically to reflect changes in legal requirements, platform capabilities, or operational practices.
The updated version will be published on this page together with the revised "Last Updated" date.
For questions regarding this Privacy Notice or ShieldVUE's privacy and data protection practices, please contact:
Email: sales@apmosys.com
ShieldVUE® is a proprietary Software Supply Chain Security platform owned by ApMoSys Product Private Limited and supported by ApMoSys Technologies Private Limited.
Copyright © 2026 ApMoSys Product Private Limited. All rights reserved.
