How Trefur uses aggregated telemetry to improve safety intelligence
The short version: Trefur computes safety signals about the tools and models AI agents use — never about you, your users, or your content. Unless you opt out, your workspace contributes de-identified, aggregated behavioural statistics to those signals. You can opt out at any time with one switch, effective immediately for all future telemetry.
What is contributed
Statistical aggregates derived from how tools and models behave at runtime — for example: error and permission-usage rates, network-endpoint categories a tool contacts, latency and reliability measures, and coarse usage counts. Before any figure leaves your workspace’s isolated storage it is (1) stripped of workspace identity, (2) combined with the same measure from multiple unrelated organisations, and (3) subject to minimum-participation thresholds — a statistic is never published unless enough distinct organisations contribute that no single organisation’s activity is recoverable from it.
What is never contributed, under any setting
Prompt or completion content; retrieved documents or files; credentials, tokens or keys; personal data of your users; your workspace name or identifiers; individual traces or logs. Content redaction is applied client-side by default before telemetry leaves your environment, and server-side controls apply again on receipt.
Where the switch is
Settings → Observability → “Contribute anonymized signals.” Opting out stops all future contribution immediately. Aggregates already computed cannot be un-blended — they contain no recoverable trace of your workspace — but nothing new is added after you opt out.
Enterprise plans
Enterprise plans default to not contributing; contribution is enabled only by explicit administrator action.
Why we do this
Every workspace that contributes makes the safety picture sharper for all — the same way disease surveillance works: individual cases stay private, the map helps everyone. The signals produced (tool safety scores, anomaly alerts) are part of the product you receive.
Legal basis (B2B): legitimate interest in service security and improvement, balanced by de-identification, aggregation thresholds, default-off for Enterprise, and one-click opt-out. This page is referenced by the DPA.