Skip to main content

Where is my data stored?

All data is stored in the EU (eu-west-2) on Supabase-managed PostgreSQL with row-level security enabled. Infrastructure runs on AWS, Vercel, and Fly.io, all EU-hosted.

Is my data used to train models?

The research data you give us for a custom user model is used to build and operate your user model. That is what the service does: we build a model for you, from your data, scoped to your organisation. Your data is never used to:
  • train, fine-tune or otherwise adjust any other customer’s user model;
  • make your user model accessible to any other customer (each user model is scoped to its owning account);
  • train foundation or general-purpose models.
Third-party model providers we call while a simulation runs do not retain your questions, your documents or your user model data. Separately, we do use aggregate performance data about user models (accuracy scores, test results, evaluation metrics) to improve the methodology by which we build user models in general. That is not training on your content — it is the same kind of learning a research team does when reviewing which methods worked. The aggregate statistics we keep do not contain your data and cannot be reversed back to it.

How are API keys managed?

API keys are generated per account and scoped to your organisation. Keys can be rotated at any time under Settings → API Keys. See Authentication for how to send one. All API requests are authenticated and rate-limited.

What LLM providers do you use?

We run a mix of our own inference infrastructure and major model providers with enterprise data processing agreements. Your questions, documents and user model data are sent to a model only while a simulation is planned or run, and are not retained by any provider.

Do you have SOC 2 or ISO 27001 certification?

Not yet. We’re a small team building toward formal certification as we scale. If you have specific compliance requirements, get in touch and we’ll work through them with you.

Can I delete my data?

Yes. You can delete projects, simulations and contexts in the app at any time. To delete a user model built for your organisation, or your account, email support@semilattice.ai. Deletion is permanent and propagates to all storage layers.