Security and data

Where your conversations live, who can read them, and how long they are kept.

#Storage

• Stored in AWS (us-east-1), encrypted with a dedicated KMS key that only the platform's production role can use.
• TLS everywhere; the storage refuses unencrypted connections and any write not under the platform key.

#Retention and deletion

• Conversations are deleted 90 days after they arrive.
• A conversation cited by a failure mode is kept as its evidence until you delete it.
• Admins can delete any conversation from the console. It is removed from every failure mode citing it, and older copies are purged within 30 days.

#Access

• Access is by invitation. Admins manage the team; viewers never see conversation content.
• Every read of a conversation and every change, by anyone including General Context, is in your workspace's access log, kept 400 days.
• API keys are stored only as hashes and can be revoked at once.

#In your process

• The SDK never slows or fails your model calls, sends only over HTTPS, and holds a bounded amount of memory.
• Redaction removes phone numbers, emails, card numbers and SSNs before they leave your process. See Redaction and filtering.