Security answers are worth nothing unless they are precise, so this page says what is true, what is true with a condition, and what we will not claim.
Your material is isolated
A room, its runs and its files belong to your account. Nothing is pooled with another customer. That half is simple and it holds.
What we will not tell you is that you have a firm-level tenant. Accounts are individual: there is no shared firm workspace, no seat management and no administrator view, and a room carries no organisation on it. Work is shared by sending it, not by a shared space. If somebody has told you otherwise, they were describing something that does not exist in production.
We do not train on your files
There is no training pipeline in our own code. Your documents are not used to train anything of ours.
The honest qualification: runs execute through third-party model providers, and six hold credentials in production — OpenAI, Anthropic, Google, xAI, DeepSeek and Moonshot. Routing decides which handles a given step. What each of them does with data under its own API terms is a question about that provider, and we will come back to you with the specifics rather than issue a blanket guarantee that covers companies we do not control.
We also will not answer a residency or sub-processor question by naming one provider. Six are configured; naming one would be a convenient answer and a false one.
Every run is recorded
Runs, their messages, their states and their credit transactions are stored per account and are retrievable. If you need to know who ran what and when, we can tell you.
The per-source half — which data source answered which step — is recorded unevenly across products. We do not offer a client-facing per-source audit export today, and we would rather say that than demonstrate one that only works on some products.
What to ask for if you need more
If your firm needs a signed data processing agreement, a named sub-processor list, a residency commitment or an audit report, ask. Those are decided by a person here, and you will get either the document or a straight answer that it does not exist yet. Nobody on our side is authorised to invent a compliance posture in a chat window.