Where your data lives

Your systems

Your accounting, your CRM, your mailbox, your shop. The platform reads a record, acts on it and writes the result back through the system’s own interface. Nothing is copied out to live somewhere else. The exception is apps you run with us: their records live in a database dedicated to your company, in Frankfurt.

Your environment

Your agents run in an environment that is yours alone, in the European Union, with no credentials of the platform inside it. No agent can reach another customer’s environment, and that boundary is a property of the platform rather than a setting.

Running the part that touches your systems inside your own network is available on request.

The platform

The platform holds the process rather than your records: the plans you approved, your rules, the run log and the encrypted values behind your connections. That lives in the platform’s own database in the European Union, separated per customer.

By default a connection value is never handed to the agent: it is inserted only at the moment of use and only for the system it belongs to, and it never appears in a prompt, a log or a chat. See Connections and keys.

Apps you run with us

If you run an application on the platform, for example a register of received invoices, its records are kept in a database dedicated to your company and its files in a folder dedicated to your company, both in the European Union. They are backed up every six hours on the server and as an encrypted copy in Germany, and a restore of the database is tested automatically every week. On request we hand them over to you within 30 days as tables and files.

The model call

When a step needs judgement, the document or record being worked on is sent to Anthropic’s Claude models under a business agreement: no training on your data, and retention only as those terms allow. Anthropic is our only model provider. A step that runs as a script sends nothing to a model at all, and most steps are scripts. See What it runs on.

What is kept and for how long

Plans, rules, encrypted connection values and the run log, for as long as you are a customer, exportable at any time.

Leaving

You keep every plan in plain language, the list of connections and the full run log. Records in your systems never moved. Data of apps you run with us is handed over as tables and files within 30 days.