Trust center
What we do with your data, where it lives, who can reach it, and which audits are finished and which are not. Written for the person doing the security review.
- Subprocessors, by regionOpen
- Data processing agreementDownload PDF
- Vulnerability disclosureReport
- System statusAll systems operational
Your data stays in the region you choose. So does the AI.
You pick a region on any paid plan. Conversations, contacts and files are stored there, and AI inference runs there too, so a message is not sent to another region to be answered.
Data region · Tidewater
Sample workspace- Region
- EU (Frankfurt)
- Conversations, contacts, files
- Stored in region
- AI inference
- Runs in region
- Backups
- Stored in region
How your data is protected.
Encryption
Data is encrypted in transit and at rest. Enterprise workspaces can hold their own encryption keys. The architecture page gives the detail a reviewer needs.
Security architecture →Access controls
Roles decide who can see conversations, billing and settings. Two-factor sign-in is available to every workspace. SSO is on Growth and SCIM on Scale, not held back for the top plan.
Roles and permissions →Audit log
Who changed what, and when: sign-ins, role changes, exports, AI publishes and billing actions. On Growth and above, with streaming to your SIEM on Scale.
What is logged →Your exit
Full export on every plan, during a suspension, after you cancel, and for 90 days after a workspace is closed.
Portability commitment →Suspensions
Each quarter we publish how many workspaces we suspended, why, and how appeals ended. Placeholder: the first report appears after the first full quarter.
Suspension policy →
Audits: where each one stands.
We do not claim a certification until the report exists. When one is finished, its status changes here and the report can be requested under NDA.
Placeholder statuses. Confirm each one before this page is published.
- SOC 2 Type IIIn progress
- ISO 27001In progress
- ISO 42001, for AI managementPlanned
- HIPAA, with a BAA on EnterprisePlanned