Where your data lives

Your systems

Your accounting, your CRM, your mailbox, your shop. The platform reads a record, acts on it and writes the result back through the system’s own interface. Nothing is copied out to live somewhere else, and there is no database of ours holding your invoices.

Your container

Your agents run in a container that is yours alone, in the European Union. One customer, one container, with no credentials of the platform inside it. No agent can reach another customer’s container, and that boundary is a property of the platform rather than a setting.

Running the part that touches your systems inside your own network is available on request.

The platform

The platform holds the process rather than your records: the plans you approved, your rules, the run log and the encrypted values behind your connections. That lives in the platform’s own database in the European Union, separated per customer.

A connection value is decrypted and placed in your container only for the run that needs it, and it never appears in a prompt, a log or a chat. The agent works with the name of a connection and never receives the value itself. See Connections and keys.

The model call

When a step needs judgement, the document or record being worked on is sent to Anthropic’s Claude models under a business agreement: no training on your data, and retention only as those terms allow. Anthropic is our only model provider. A step that runs as a script sends nothing to a model at all, and most steps are scripts. See What it runs on.

What is kept and for how long

Plans, rules, encrypted connection values and the run log, for as long as you are a customer, exportable at any time.

Leaving

You keep every plan in plain language, the list of connections and the full run log. Your records never moved, so there is nothing to migrate back.