Security

Your team's context stays yours.

Built with data privacy at the core. Here's how your data is handled. This is the controls bigger teams need.

AES-256 at rest · TLS 1.2+ in transit · GDPR-aligned, EU hosting · SOC 2 Type II (in progress)

Never used to train models

Prompt together, branch to explore in parallel, and let the queue handle it when everyone types at once. The whole team in one thinking space.

Prompt together, branch to explore in parallel, and let the queue handle it when everyone types at once. The whole team in one thinking space.

Prompt together, branch to explore in parallel, and let the queue handle it when everyone types at once. The whole team in one thinking space.

Prompt together, branch to explore in parallel, and let the queue handle it when everyone types at once. The whole team in one thinking space.

Enterprise controls

SSO & SAML

Single sign-on and directory sync. Enterprise

Audit logs

Full visibility into who accessed what, and when. Enterprise

SOC 2 Type II

Independent security audit. In progress

BYOK

Your own Anthropic / OpenAI keys. Enterprise

FAQs

No. Your content and prompts are never used to train models. We use enterprise terms and zero-data-retention agreements where available.

Additional mirrors the permissions of your connected tools. People only ever see what they already have access to at the source.

In the EU. Additional is GDPR-aligned with EU hosting by default, and enterprise plans can specify data residency requirements.

Yes. AES-256 at rest and TLS 1.2+ in transit, with workspaces isolated from each other.

No. Access to customer content is restricted and audited, and support access always requires your explicit consent.

SOC 2 Type II is in progress. We already operate GDPR-aligned, and enterprise agreements are available on request.