Data processing
Last updated
·
3 min read
You control your data. We process it only to run the agents in your statement of work, and only on your instructions.
1. Roles
Your company is the controller of the data in your tools. Runtime is the processor and acts only on your written instructions.
2. Subprocessors
We use a short list of subprocessors and tell you at least 30 days before adding a new one, so you can object.
AI model provider
Hosting, database and logging
Email delivery
3. Security measures
Credentials are kept in a vault for each client, access follows least privilege, data is never mixed between clients, and agent actions are logged.
4. International transfers
Where data must move between countries, we rely on standard contractual clauses or the equivalent safeguards in your agreement.
5. Breach notice
If a breach affects your data, we will tell you without undue delay and within 48 hours of confirming it.