Sensitive data: frequently asked questions

skyseat is in early access. These are today's answers: what we do not have yet, we say too. What depends on your case is marked.

Where is my data?

The platform, its database and the key vault run on Hetzner servers in Finland. Your AI employees' computers are in Germany. An encrypted copy is made every day and stored outside the server. If you need your data in the United States, it can be hosted there, but we agree that in writing before you start.

Who can see it?

Only your company, and within it each person according to their role: an administrator sees everything; a manager answers alerts and assigns tasks; a member assigns tasks and sees the work; a viewer changes nothing. If you work with an agency, the agency sees the clients it manages. The skyseat team only sees what is needed to run the platform and what you write to us in "Write to the team".

What does the AI model see?

For each task, the employee sends Claude (by Anthropic, in the United States) what that task needs: the email or document it is working on. It uses your company's API key, or its Claude Team or Enterprise account. Under Anthropic's business terms, that data is not used to train its models. skyseat does not use customer data to train any model either. Your account passwords do not pass through the employee's computer: the platform uses them on its behalf.

Anything you paste or pass to it can reach the model. Give it only what the task needs.

And health data?

If an email, chat, WhatsApp message or document with health data comes in (a diagnosis, sick leave, a prescription…), the platform flags it. The employee does not keep it in its memory or the team's memory, and we alert a person in the Inbox without copying the text. The platform's own AI does not read it unless you allow it, and that is off by default.

But the flag works on words: it does not catch everything. And while the employee works with a text, that text does reach the model. skyseat is not a medical record and holds no health-sector certifications. If you are a clinic, we recommend not sending complete medical histories or test results: use it for admin work (appointments, billing, reminders) and decide what you pass to it. Processing health data needs its own legal basis, which you define with your adviser.

How long is each thing kept?

These are the default periods. You can change them in Account › Data & privacy, within limits, and the platform applies them every 6 hours. Every deletion is recorded in the Audit log.

• Calls (summary and transcript): 90 days.
• Emails and WhatsApp messages: 90 days.
• Team chat messages and attachments: no default period; you can set one.
• Website chat with visitors: 90 days without activity.
• What an employee remembers about a client or contact: 365 days from the last time it was touched.
• Audit log: does not expire by default. If you set your own period, it is at least two years.
• IP addresses of access: 6 months.
• Backups: deleted data leaves them within 63 days at most.

How is data deleted?

• Automatically: by the periods above, when they expire.
• By hand: calls, emails and messages. In an employee's memory you can ask it to forget a person across the whole team.
• A dismissed employee: loses access at once. Its computer is kept 30 days and then deleted; if you choose, it is deleted right away.
• Your account or company: "Close the company" has 30 days to be cancelled. After that, everything is deleted. Download first whatever you want to keep.

What has already gone out (a sent email, a published post) cannot be recalled.

Do you comply with GDPR?

You are the controller for your clients' or patients' data, and skyseat is the processor. The data processing agreement (DPA) covers that, together with the sub-processor list and the privacy policy. They are drafts pending legal review. Employees work with GDPR in their instructions and with the minimum necessary data. If a person asks to access, correct or delete their data, you handle it as controller, and you have one month to reply. In an employee's memory you can ask it to forget that person.

If a breach affects you, we will tell you from the panel and by email. A person confirms the exact deadline.

What is kept in the Audit log?

Everything employees and people do: what, when, with which account and who approved it. It cannot be edited or deleted by hand. Each row carries a hash chained to the previous one, so any change shows. You download it as PDF, CSV or JSON, and anyone can check with skyseat's public key that the file is intact, without asking us. Employees introduce themselves as AI assistants when they start a call or an email.

What do I do if an inspection arrives?

1. Download the Audit log for the period you are asked for: Activity log › Audit log, as PDF, CSV or JSON. Keep it yourself: calls are only kept 90 days.
2. Check the file on the same page, with "Check a file".
3. Keep at hand your record of processing activities, the signed DPA and the sub-processor list.
4. If they ask skyseat for something, write to us from Help › "Write to the team". A person replies within one business day.

This helps you document it. It is not a certification and does not guarantee that you comply with the law: talk it through with your adviser.

Do you have certifications?

Not yet. Today we do not have SOC 2 or ISO 27001, nor a penetration test by an outside firm. SOC 2 Type I is planned, with no confirmed date. What we do have, with its sources, is in the Trust center.