Trust Centre

Your data stays yours. Trefur observes by default, redacts on your side by default, and keeps data only for your plan's retention period.

What we read

  • Telemetry from your SDKs and collector: model and tool calls, timings, costs, errors and related metadata.
  • Activity and inventory from the apps your administrators connect, such as Google Workspace, Microsoft 365, Slack and cloud accounts, to show which AI apps and agents are in use.
  • The exact access requested for each integration is listed in the Connected Integrations appendix.

What we never read

  • The contents of anyone's Drive, Docs, Sheets, Gmail or Calendar. Trefur does not offer Google Workspace tools.
  • File contents. Where an integration reports which files an app opened, we keep the file name, encrypted with a key specific to your workspace.
  • Full card numbers. Stripe holds payment card details.
  • Google and Microsoft account data is never sold, used for advertising, or used to train generalised AI models.

How data is handled

  • Redacted on your side by default: our SDKs and collector replace common sensitive values before telemetry is sent.
  • Each workspace has a content privacy setting that starts at redacted and can be tightened to metadata only.
  • In connected-app activity, people are stored as pseudonymous references. Owners and admins can reveal an identity, and every reveal is logged.
  • Hosted in Singapore.

Security practices

  • HTTPS for the application, and TLS for telemetry from our SDKs and collector by default. Database connections require TLS.
  • Credentials and OAuth tokens are encrypted with AES-256-GCM, using per-workspace keys.
  • Workspace data is separated by row-level security in the database, in addition to application checks.
  • Role-based access, multi-factor authentication at sign-in, and an audit log of sensitive actions.
  • Security contact: security@trefur.com (see security.txt).

Retention

  • Telemetry and connected-app activity are kept for your plan's retention period: Free 14 days, Pro 30 days, Team 90 days, Mid-Market 180 days, Enterprise 365 days, or the period in your order form.
  • Expired data is removed daily and permanently deleted after a grace period of up to 7 days.
  • Deleting a workspace deletes its data, as described in the Privacy Policy.

Sub-processors

  • The providers that process data for us, what each does and where, are listed on the Sub-processors page. We update the list before adding or replacing one that processes Customer Data.

Service levels

  • Uptime, availability, response-time and service-credit commitments are available on Enterprise plans, as set out in your signed order form.

Your documents