What agents receive
Agents only receive the fields mapped to their workflow during integration setup. Full source documents stay in your systems unless a workflow explicitly requires document content (e.g. contract review), in which case the scope is part of the agent's listed behavior.
Retention
| Data | Retention |
|---|---|
| Operation metadata (action, status, duration) | Life of the workspace |
| Operation payloads | 30 days, then deleted |
| Escalation queue items | Until resolved + 90 days |
| Audit events | Life of the workspace |
Workspace deletion removes all associated data within 30 days.
Sub-processors and residency
Production data is processed in the United States. The current sub-processor list and our Data Processing Agreement are available at legal/dpa. Custom-plan deployments can pin data residency or run fully on-premise — see On-premise deployment.
Your responsibilities
Map only the fields a workflow needs; do not route credentials or secrets through operation payloads; and use the DPA exhibit to document any special-category data before enabling a workflow that touches it.