How we handle your data
No vague promises. Bullets and checkmarks.
Open security review kitData sources & permissions
- OAuth or API key. No broad scopes.
- Read-only by default. We never write back.
- Permissions scoped per workspace, revocable anytime
Redaction options
- Emails and phone numbers redacted at ingestion
- Names optional. Toggle per workspace.
- Custom regex rules for additional PII
Retention controls
- Workspace-level retention: 30 days to 12 months
- Hard delete on schedule. No recovery after retention window.
- On-demand purge available
Need a security review?
We'll walk through our posture in detail.