Security

Security and data handling

Short version: we build on sample data. Real data is used only after you approve it, in your own accounts or a hosting region you pick.

How we handle data

We build on sample or masked data wherever we can, so your real records are rarely needed to build or test.
Production runs in your own cloud or tenant, or in our cloud in your region if you prefer. You choose.
Access is through accounts you control. You create them, you can see what they do in the logs, and you can revoke them at any time.
Least access. We ask only for the permissions the job needs.
A data processing agreement is signed before we handle real personal data for you, with transfer clauses where needed.
We name third parties. If a job uses an AI model service or a data provider, we tell you which before we start.

If we find or suspect a problem that affects your data, we tell you by email without delay and say what we know.

Write to us. We answer security questions in writing before any work starts.