Clarity is a control.

BKU's contracting and billing entity is 株式会社BKU, incorporated in Japan. See the Company page for entity roles, registered address, leadership and workforce registrations.

Workforce licences and registrations are presented with their legal entity and regulated activity scope. Partners are reviewed against the role they will perform, the documents they handle and the escalation path required for the engagement.

Participant sourcing, identity checks, project-specific consent, withdrawal and deletion requirements are agreed before collection. Compensation and participant communications are scoped to the project and recorded in the delivery brief.

• Access control is scoped to the people and systems needed for delivery.
• Devices, storage and transfers are selected for the project and its data sensitivity.
• Contact submissions are validated, sanitised and protected by server-side Turnstile verification.
• HSTS, content-security, frame, referrer and permissions policies are set at the edge.
• Retention and deletion requirements are agreed before collection begins; submissions are not logged in plaintext by the endpoint.
• Incident contact: info@bku1.com.

The production deployment supports a Cloudflare rate-limit binding for the contact endpoint; the binding must be attached before launch. Subprocessors: A list of subprocessors is available on request.

These licences and registrations apply only to the legal entities and regulated workforce activities identified on the Company page. They are not certifications of BKU's AI evaluation, data collection, or information-security services.