Security

Your conversations stay yours.

Alex only works if you're willing to share the messy middle of your business. Here's how we earn that trust.

Data ownership

Every profile, conversation, and decision stored in Alex's memory belongs to you. Export or delete anytime. We never sell or repackage it.

No training

Your conversations with Alex are never used to train public foundation models. Ever. Full stop.

Encryption

All traffic is TLS 1.3. Stored data is encrypted at rest with AES-256. Keys rotated on a schedule.

Provider

Alex's reasoning happens on Claude models. Anthropic's Trust Center covers their data-handling posture.

Access

Engineers don't browse your data. Support can view what they need to resolve a specific ticket you raise, nothing more. Audited.

Compliance

Audit underway. GDPR / CCPA requests handled within statutory windows. DPA available on request for Team and Company plans.

Security FAQ

Direct answers.

Where is my data stored?: Primary region is US-East. Team and Company plans can request EU data residency.
Can I delete my account?: Yes, one click. Deletes every memory record, conversation, profile, and artifact within 30 days.
Who can see my conversations?: Only you. Team plans surface a shared business profile, not individual DMs. Company admins see usage metrics but not message contents.
What happens during outages?: We failover across model providers. Memory writes are replicated. Status page linked in the footer.

Email security@getchiefofstaff.com. Engineers answer, not AI.