Your workspace can hold alerts, investigations, identity context, and AI-assisted drafts—exactly the material attackers would love to leak or misuse. Design treats retention, access boundaries, and subprocessors as first-class concerns for regulated teams and procurement reviews.
Technical safeguards
- Encryption in transit and at rest for data we steward.
- Tight internal access controls with logging appropriate to a security product.
- Formal attestations (for example SOC 2) when published—ask for current detail when your vendor review requires it.
Data residency
Primary regions are US-based today. If you need a different region or residency posture, raise it before purchase so feasibility can be confirmed.
Legal documents
The Privacy Policy and Terms of Service on this site govern informal summaries here. A GDPR-style Data Processing Agreement is offered where applicable; enterprise agreements can add terms when both sides require them.
For AI-specific subprocessors and model interaction, also read AI models & usage and the FAQ Privacy category.