A lab's counsel will ask which method, who signed, and what k. The answer is on paper before the data moves, and it ships with every delivery.
delivery manifest · rcm corpus
Every corpus traces to a named business that signed a training-only licence with Enjamb Labs. The chain is disclosed to a buyer under NDA, to the extent needed to establish provenance.
Buyers may train and evaluate. They may not resell, redistribute or attempt re-identification.
Data from customers of the Enjamb platform is held in separate systems under separate agreements and never enters this pipeline.
Per dataset: Safe Harbor or Expert Determination, who signed it, the identifier classes covered, the date-shift design, the k used on quasi-identifiers, the tier of each field, and the red-team result.
What the seller carved out, and the hashes that prove it never entered the pipeline. Categories, never content.
Each delivery is unique. A file found where the licence does not allow it traces to the buyer it was delivered to.
Raw records are stored in the United States only, encrypted and access-logged. Every buyer and transfer is screened against US bulk-data rules. Health and financial-account corpora go to labs in the United States and allied jurisdictions only.
Retracted records are removed from the next delivery and listed in the change log.
Also in for labs
