Procurement kills more deals than product feedback does. So we treated trust as a feature from day one. Here is exactly what we see, what we don't, and what your CISO needs to know before the call.
The agent works on aggregated marketing performance only. Spend, conversions, ROAS, channel attribution, pipeline value. PII is filtered at the source before our agent ever sees it.
Your customer records, contact lists, and audience exports stay where you put them. Names, emails, phone numbers, addresses: never leave your tenant. The connectors are scoped to performance objects only.
OAuth connections you can revoke any time, in your tool, without asking us. We never request admin access. Read-only scopes wherever they exist.
At Pro tier, we connect to a read-only role you create in your warehouse. Every query we run is logged in your Snowflake or BigQuery audit log. Independent verification, on your terms.
At Enterprise, customer-managed encryption keys. EU data residency. Customer-controlled retention windows.
Zero data retention from the model provider (Anthropic). Your prompts and responses are never used to train AI. Contractually enforced.
SOC 2 Type II audit completing end of 2026. GDPR DPA available today. EU data residency at Enterprise tier. Dedicated security questionnaire response within 48 hours.
Anthropic (model inference, zero retention). Vercel (hosting). Neon (Postgres). Upstash (queue). Cloudflare (CDN, WAF). Clerk (authentication). That is the full list. No analytics SDKs in the workspace. No tracking pixels. No third-party tag firing on the surface.
If we add a sub-processor, you get 30 days notice and the right to object. The full DPA addendum is available on request.