Questions engineers ask first

No. Nothing from request content is stored, and transcripts are never written.

To your model provider, on your own credentials, on every plan. We do not call a model on our contract. With the SDK the provider is any you like; through the proxy it is the instance's provider, or, on every paid plan, the address you set per key.

In the EU. Every sub-processor is in the EU or EEA and is entered in our register of processing activities before it is used.

No — pseudonymisation. You keep the mapping, so the answer can be turned back into the document you sent.

That is the point of a token rather than a black box: the sentence keeps its shape, so the model still reads who did what to whom — it just does not learn the name.

By default it is passed on and reported in the answer, so you always know a file went through. Switch file masking on in your account panel and a docx, xlsx, pptx, csv or txt is masked and rebuilt, and still opens; a PDF with a text layer comes back as its masked text, and on every paid plan so does a scan or a photographed page, billed as the text it holds. A file your provider fetches by id is never masked — the answer says so, with the reason. You can also refuse every request that carries a file.

Yes. A key is a system, not a person: each key carries its own rule profile — its own jurisdictions and its own selection of rules. The profile belongs to the credential, not to a header.

As many as you like. No plan limits users; we charge for characters. The browser add-on is included in every paid plan, for every person — what it masks counts as characters like any other request.

Which account, which key, which tool, allowed or refused — with no content at all. It answers who sent this and who approved this.

The gateway serves from its last snapshot, so existing customers keep working; only new registrations wait.

Yes, from the Starter plan, for an extra fee: in your private cloud or on your own servers, on an annual contract. It is not bought in a browser — talk to us and we set it up with you. Enterprise adds an installation with no outbound connection at all, high availability and an SLA.

It lowers the personal data your model provider receives and gives you a control point with an audit trail.

You do, in the account panel: your account's file policy is to report and pass it on (the default), mask what can be masked, or refuse the request. Each response says what happened to every file, and scans are read by OCR on every paid plan — scan at 200 dpi or more for the best reading.