Skip to main content

What we keep

Deletion on request is supported for a workspace and everything under it. Ask support.

What TypeSafe keeps — and the decision we have made about it

This is the part most security reviews ask about, so here it is without softening. The message text we send for classification is processed under TypeSafe’s standard plan terms. They publish that their model is not trained on customer requests or responses, and they offer zero data retention as a term on their enterprise plans. We have not taken zero data retention. Not yet, and that is a deliberate choice rather than an oversight.
On day one, classification requests are processed under TypeSafe’s default retention, not under a zero-retention agreement. If your policy requires ZDR for every processor that sees message content, this is a blocker for you today — tell us, because it changes the priority of the decision below.

Why we made that call, and what would change it

ZDR is an enterprise-plan term: a line item and a negotiation, not a configuration flag. What reaches this processor is already the narrowest payload we could design — a message and a channel name, no identifiers, no code — and for an early product the cost of the plan that carries ZDR is real. So the sequence is: ship, and buy the term when the volume or a customer’s policy justifies it. We intend to get there. What we will not do is write “zero retention” on this page, into a DPA, or into a questionnaire answer before a contract says it — which is precisely why you are reading this paragraph instead of a reassuring sentence. If ZDR is a requirement for you, say so during evaluation. It moves from “later” to “now”, and we would rather have that conversation than discover it in a redline.

What is not yet in writing

Two of TypeSafe’s commitments above are, today, published statements rather than terms we hold contractually: that the model is not trained on customer content, and what the retention window actually is on the plan we are on. Getting both in contract form is open work, tracked on our side and not hidden from you here.