Data & privacy
Retention, redaction, exports, and residency. You decide how long data lives — Tandem enforces it on a schedule.
Deletion is permanent after the retention window. Audit logs are exempt from edits.
Conversation transcripts
Chatwoot remains canonical; Tandem keeps a mirror
Report run results
Existing snapshots remain reproducible
Audit log
Required for security review
Knowledge source versions
Old versions are pruned automatically
Backups
Encrypted · separate region
Redact emails in report deliveries
Replaced with role-based labels
Redact card and bank numbers
Only last 4 digits retained
Redact phone numbers in exports
Numbered placeholders
Exclude free-text notes from analytics
Notes stay visible in the conversation
Applied before output is stored or delivered.
Added to every PDF export.
Workspace export (full)
Requested Nov 9 · expires in 7 days
Report runs · Oct
Oct 31 · expires in 7 days
Knowledge sources
Oct 12 · expires in 7 days
Data stays in the selected region, including backups. Model inference is processed in-region with zero data retention.
Delete a person's data
Removes transcripts, report references, and knowledge mentions. Chatwoot must be handled separately.
Delete all knowledge
Stops all agent answers that depend on indexed sources. Requires owner confirmation.
Compliance
SOC 2 Type II · in progress
GDPR data processing addendum
Subprocessor list published
Regional backups
Zero model training on your data
Storage
8.4 GB
of 25 GBSubprocessors
Retention affects reproducibility
Deleting report snapshots keeps the definition but removes historical results.