> ## Documentation Index > Fetch the complete documentation index at: https://docs.switchagents.ai/llms.txt > Use this file to discover all available pages before exploring further. > ## Agent Instructions > These docs moved from docs.flintai.dev to docs.switchagents.ai. Use docs.switchagents.ai for every link and request. > To search these docs from an AI tool, connect the MCP server at https://docs.switchagents.ai/mcp. The page index is at https://docs.switchagents.ai/llms.txt. > The source code for these products is public on GitHub. Switch Rooms: https://github.com/sandbox-quantum/switch. Switch Trust CLI: https://github.com/sandbox-quantum/switch-trust-cli. Switch Trust CodeScan action: https://github.com/sandbox-quantum/switch-trust-codescan-action. Switch Trust MCP server: https://github.com/sandbox-quantum/switch-trust-mcp. Switch Trust Python SDK: https://github.com/sandbox-quantum/switch-trust-sdk-py. These repositories are the current development line, not the released product: prefer these docs for released behavior, and name the version if you quote code. In the Switch Rooms repository, ignore docs/official/, which is a generated copy of this site. # Data handling > How Switch Trust handles and protects your data **Last Update:** October 13, 2026 Switch Trust helps you understand and secure AI agents in your organization. This page explains what data we collect, how we protect it, and how you can manage it. **Legal agreements:** For GDPR compliance details, see our [Data Processing Addendum](/legal/dpa). ## What data we collect ### Account and authentication data When you create an account, we collect: * **User information** - Names, email addresses, user IDs * **Authentication credentials** - API keys (encrypted), session tokens * **Organization details** - Organization name, team membership ### Code and repository data When you connect a code repository: * **Repository metadata** - Repository URLs, branch names, file paths * **Code snippets** - Small excerpts (typically 100-500 characters) showing where agents are used * **Commit information** - Author names/emails, timestamps, commit messages (from git history) **What we don't collect:** We don't capture your entire codebase - only snippets showing where agents are used. However, depending on your repository structure and agent implementation patterns, these snippets may occasionally be larger than 500 characters to provide sufficient context for security analysis. ### Agent session data When you monitor runtime agent sessions: * **Agent prompts** - Input prompts sent to LLM models * **LLM responses** - Model outputs and completions * **Model metadata** - Model identifiers (for example, "claude-3-5-sonnet"), timestamps * **Policy violations** - Guardrail policy IDs and enforcement actions * **Claude Code plugin data** - If you use the Switch Trust plugin for Claude Code, it reports your Claude Code usage to Switch Trust, where all members of your organization can see it, so you can see what Claude Code costs, per person and per repository, over time. It reports: * **Conversation content** - Prompts and responses * **Tool activity** - Tool inputs and outputs, including commands run, file contents and command output * **Usage data** - Token counts, model and session details * **Repository data** - Repository name and a hash of the repository URL * **User identity** - Your Git email address, or your login name if Git has none. You can set a different identity in `/config` in Claude Code. The *full* report mode is the default and sends all of this data. *Text* mode sends prompts and responses but not tool inputs or outputs. *Condensed* mode sends usage data, repository data, your identity and a brief session summary that includes the branch name, but no conversation or tool data. *None* turns reporting off. To change the mode, use `/config` in Claude Code. In *full* and *text* modes, the plugin replaces recognizable secrets, such as API keys, tokens, private keys and passwords, before it sends anything. This is best-effort: a secret with no recognizable pattern can still be sent. If your Claude Code sessions handle Prohibited Data (see the warning below), use *condensed* or *none*. * **Switch Rooms guardrail checks** - Off by default. When the administrator of a Switch Rooms server running version 0.30.0 or later turns on guardrails by saving a Switch Trust API key and a guardrails policy, the server sends the text of each message to Switch Trust for policy evaluation before delivering the message to the room. The setting applies to every room on that server. Each check includes the message text, whether it was authored by a person or an agent, and the room ID. Messages with file attachments aren't checked. ### System metadata To operate the service, we collect: * **IP addresses** - For security monitoring and access control * **Session IDs** - To track user sessions and API requests * **Trace IDs** - For debugging and performance monitoring > [!WARNING] > > **Prohibited Data.** We collect ordinary Personal Data as described above (names, emails, code metadata). However, you must not submit **Prohibited Data** (as defined in our Software License Agreement Section 7(c)(ii)), including: > > * **Secrets** - Passwords, API keys, private keys, tokens in code or prompts > * **Sensitive categories** - Health records, financial accounts, government IDs, biometric data, data revealing racial/ethnic origin, political opinions, religious beliefs > > The Personal Data we collect is necessary to operate the service and is not Prohibited Data. *** ## How we protect your data ### Encryption * **In transit:** All data transmitted to Switch Trust uses **TLS 1.2 or higher** (HTTPS) * **At rest:** All stored data is encrypted using **AES-256** or equivalent industry-standard encryption * **API keys:** Your authentication credentials are encrypted before storage ### Access controls * **Principle of least privilege:** Only authorized SandboxAQ personnel can access customer data, and only when necessary for support or operations * **Role-based access control (RBAC):** Internal access is restricted by job function * **Multi-factor authentication (MFA):** Required for all personnel accessing production systems ### Network security * **Firewall protection:** Production infrastructure is protected by firewalls and network segmentation * **Intrusion detection:** Automated monitoring for unauthorized access attempts * **DDoS protection:** Distributed denial-of-service mitigation ### Monitoring and incident response * **Security monitoring:** 24/7 automated monitoring for security events * **Incident response plan:** Defined procedures to detect, contain, and remediate security incidents * **Breach notification:** We'll notify you within **72 hours** if a data breach affects your data (see our [DPA](/legal/dpa) for details) ### Compliance and audits * **Vulnerability management:** Regular vulnerability assessments and penetration testing * **Security training:** All employees receive data security and privacy training * **Third-party audits:** We undergo regular security audits and assessments **Certifications:** We are pursuing industry-standard security certifications including SOC 2 Type II and ISO 27001. Contact [privacy@sandboxaq.com](mailto:privacy@sandboxaq.com) for our current compliance status and available audit reports. *** ## Data retention We retain data only as long as necessary to provide the service or as required by law. ### Retention periods by data type | Data Type | Retention Period | Why | | - | - | - | | **Account information** | Until account deletion + 30 days | User management, support | | **Code snippets** | Up to 6 months (medium) | Historical analysis, audit trails | | **Agent session data** | Up to 6 months (medium) | Compliance reporting, trend analysis | | **LLM prompts/responses** | Up to 6 months (medium) | Policy enforcement, analytics | | **System events (high-volume)** | Up to 4 days | System fault recovery, debugging | | **Aggregated analytics** | Up to 1 year (long) | Product improvement (anonymized) | | **Audit logs** | Up to 5 years (very long) | Regulatory compliance, security investigations | **Retention tiers:** * **Very short:** Up to 14 days * **Short:** Up to 2 months * **Medium:** Up to 6 months * **Long:** Up to 1 year * **Very long:** Up to 5 years ### After you cancel When you terminate your subscription: * **Within 30 days:** We delete all Personal Data (as defined in our [DPA](/legal/dpa)) * **Exception:** Data required by law to retain (for example, audit logs for regulatory compliance) * **Usage Data:** Anonymized/aggregated analytics may be retained per Agreement Section 7(b) **Return your data before deletion:** Request a data export within 30 days of cancellation by contacting [privacy@sandboxaq.com](mailto:privacy@sandboxaq.com). *** ## Sub-processors We engage the following sub-processors. This is the list in Schedule II of our [Data Processing Addendum](/legal/dpa#schedule-ii), which is the authoritative version. | Sub-processor | Service | Location | | - | - | - | | Amazon Web Services, Inc. | Hosting, database, and backup storage | United States (us-east-2) | | Google LLC (Vertex AI, Gemini) | Model inference for evaluations | United States | | WorkOS, Inc. | Authentication | United States | | Cloudflare, Inc. | Web application firewall, content delivery, and telemetry relay | Global | | Datadog, Inc. | Monitoring and logging | United States (US1) | | PagerDuty | Incident response | United States | | Slack | Target for logging, monitoring alerts, incident messages | United States | **Changes to sub-processors:** We'll notify you at least **30 days in advance** before adding or replacing any sub-processor. If you object on reasonable privacy or security grounds, contact us within 15 days at [privacy@sandboxaq.com](mailto:privacy@sandboxaq.com). **Stay informed:** [Contact us](mailto:privacy@sandboxaq.com) to receive email notifications when we update this list. *** ## International data transfers ### Where we process data Personal data may be processed in: * **United States** (primary infrastructure location) * **European Union** (if you select EU region, when available) Processing locations depend on where our sub-processors maintain facilities (see [Sub-processors](#sub-processors) above). ### EU and UK transfers For customers in the European Economic Area (EEA) or United Kingdom, transfers to countries without an adequacy decision are protected by **Standard Contractual Clauses (SCCs)**. **Legal framework:** * **EU transfers:** [EU Standard Contractual Clauses (2021)](https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en) - Module 2 (Controller to Processor) * **UK transfers:** [UK International Data Transfer Addendum (IDTA)](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/international-transfers/appropriate-safeguards/what-are-standard-data-protection-clauses-the-uk-idta-and-the-addendum/) For full details, see our [Data Processing Addendum](/legal/dpa). *** ## Managing your data ### Access your data You can view and export your data through the Switch Trust dashboard: * **Account settings:** View and update user information * **Repository connections:** See which repositories are connected * **Session history:** View agent session logs and policy violations **Export your data:** Contact [privacy@sandboxaq.com](mailto:privacy@sandboxaq.com) to request a complete data export. ### Delete your data You have the right to request deletion of your Personal Data: * **Account deletion:** Contact [privacy@sandboxaq.com](mailto:privacy@sandboxaq.com) to delete your account * **Specific data deletion:** Contact [privacy@sandboxaq.com](mailto:privacy@sandboxaq.com) with your request We'll delete your data within **30 days** unless retention is required by law. ### Data subject rights (EU/UK) If you're in the EEA or UK, you have additional rights under GDPR: * **Right to access** - Request a copy of your Personal Data * **Right to rectification** - Correct inaccurate data * **Right to erasure** - Request deletion ("right to be forgotten") * **Right to restriction** - Limit how we process your data * **Right to portability** - Receive your data in a machine-readable format * **Right to object** - Object to processing based on legitimate interests To exercise these rights, contact [privacy@sandboxaq.com](mailto:privacy@sandboxaq.com). *** ## Third-party integrations Switch Trust integrates with: * **GitHub** - To discover agents in your code repositories * **LLM providers** - When you use runtime monitoring, we observe interactions with your configured LLM providers (but don't control their data handling) **Your responsibility:** When you authorize these integrations, data sharing is governed by: 1. Your agreement with the third-party provider (for example, GitHub Terms) 2. Our [Software License Agreement](/legal/terms) 3. Our internal security protocols We ensure third-party providers adhere to appropriate security standards before integration. *** ## Data compaction and storage tiers ### Automatic data optimization To manage data efficiently while maintaining security: **Data compaction:** For certain ID-based data, such as inventory records, we retain only the most current version once older versions have been processed. This reduces redundancy and ensures data integrity. **Tiered storage:** Older data is automatically moved to long-term storage tiers with appropriate security controls. This balances performance (fast access to recent data) with cost-effectiveness (cheaper storage for historical data). **Example:** A 6-month-old agent session might be moved to archival storage, but remains accessible if you need it for compliance reporting. *** ## Privacy and legal ### Privacy policy This page describes how we handle data **when acting as a Processor on your behalf** (that is, processing data you control). For information about data we collect when **acting as a Controller** (for example, website analytics, product usage), see our [Privacy Policy](/legal/privacy-policy). ### Data Processing Addendum (DPA) If you're subject to GDPR or other data protection laws, see our [Data Processing Addendum](/legal/dpa) for: * Legal roles (Controller vs. Processor) * GDPR Article 28 compliance details * Standard Contractual Clauses (SCCs) * Audit rights and breach notification procedures ### Software License Agreement For general terms about Customer Data, see our [Software License Agreement](/legal/terms) Sections 7(b) and 7(c): * What constitutes Customer Data * Prohibited Data (what not to submit) * Usage Data (anonymized analytics) *** ## Contact us **For data handling questions:**\ Email: [privacy@sandboxaq.com](mailto:privacy@sandboxaq.com) **For technical support:**\ Email: [support@switchagents.ai](mailto:support@switchagents.ai) **For security issues:**\ Email: [security@sandboxaq.com](mailto:security@sandboxaq.com)