EverySchema
TRUST CENTER

Your data.
Your boundaries.

Understand how EverySchema handles your business data, controls AI access, and protects your connections.

Explore documents
01 / ACCESSRead-only by design
02 / PERMISSIONSOnly what you authorize
03 / VISIBILITYTraceable queries

Infrastructure and hosting

Where data lives and how credentials are protected.

Defined hosting region

Customer data, backups, and logs stay within a defined hosting region. Hosting location is part of the workspace’s infrastructure configuration.

Protected connection credentials

Connection credentials are encrypted using Cloud KMS. They are excluded from application logs and are never returned to AI assistants.

Separated services

Data ingestion, storage, and AI access have separate responsibilities. Workspace checks apply wherever customer data is accessed.

Access control

Permissions follow your workspace, not your prompt.

Workspace isolation

Connections, datasets, exports, and audit events belong to a workspace. Access depends on current workspace membership and permissions.

Scoped authorization

Give each assistant access to specific datasets. Everything outside that scope remains inaccessible.

Checks outside the model

EverySchema enforces access permissions and query limits independently of the AI model. A prompt cannot grant additional permissions.

AI and data use

Your assistant gets access to the data you authorize.

Read-only access

ChatGPT and Claude can query authorized data. They cannot change or delete records in your connected tools.

Your existing AI account

EverySchema connects your data to the assistant you already use. Your AI provider’s account settings and terms govern how that provider handles information returned to it.

Controlled queries

Queries run with scoped access and limits. Credentials for your original data sources are not exposed to the assistant.

Logging and traceability

A clear record of access to your business data.

Workspace audit trail

Review which datasets were queried and when through your workspace’s audit log.

Operational records

Technical events support troubleshooting and traceability. Connection credentials are excluded from application logs.

Data lifecycle

Understand the scope of storage and deletion.

Dataset context

Source, reporting period, currency, and time zone remain explicit. Compatible datasets can be combined without hiding differences in their definitions.

Workspace deletion

Removing a workspace includes removing its stored dataset rows. Deletion across storage systems and backup retention must be addressed together.

Retention details

Retention and deletion requirements belong in the applicable data processing documents. Review these details for the data categories and services your team uses.

DOCUMENT LIBRARY

The details behind
the overview.

Security information for your IT, privacy, and procurement review. Download the overview or request access to supporting documents.

Privacy Policy

How personal information is collected, used, and protected.

Read policy

Security overview

Public overview of workspace isolation, AI access, credential protection, and data handling.

Download overview

Data processing agreement

Contractual terms, processing scope, and the applicable sub-processor list.

Available on request at launch

Technical & organisational measures

Detailed security controls for an IT or procurement review.

Available on request at launch

Data deletion policy

Retention, deletion scope, backup expiry, and request handling.

Available on request at launch

Supporting documents are shared directly with your team. Request access to the documents you need and any requirements for your review.