Data & privacy
This page is a non-legal summary for company stakeholders. The binding text is always in the Legal Centre documents linked below.
What to read first
| Document | Typical audience |
|---|---|
| Privacy Policy | Everyone |
| Terms of Service | Contract signers |
| Data Processing Agreement | DPO / legal / procurement |
| Cookie Policy | Marketing / web team |
| Responsible AI Policy | AI governance |
| Service Level Agreement | Ops / IT |
Data locations and subprocessors
- Region and hosting depend on your contract and deployment. Your order form or onboarding email states where production data is processed.
- Subprocessors (e.g. cloud or payment providers) are listed or updated as required in your DPA or vendor annexes.
My AI and Knowledge
- Knowledge documents you upload are used to ground RAG and Autopilot for your tenant according to the product settings you enable.
- Do not upload data you are not allowed to process under your own policies or regulations.
Requests from individuals
For access, correction, or deletion requests under privacy laws, follow the process in the Privacy Policy or contact support with your tenant name and request type.
Related
- Authentication — sessions and account security
- Users & access — offboarding and access removal
- FAQ