Trust and data
Version 1.0 — Effective date: 2026-07-25
This is a courtesy translation. The French HTML version is the official version and prevails in case of any discrepancy.
This summary describes the current state of the Service in plain language. It does not replace the Privacy Policy, Data and backups policy, or Terms of Use, which prevail in case of a conflict.
Live today
| Topic | What is in place | Important limit |
|---|---|---|
| Identity | Google Identity Platform verifies identity; the Service then issues a signed, HttpOnly Savantis session. | Cloudflare Tunnel transports requests, but Cloudflare Access is not the identity provider. |
| Managed workspace | Each managed Savantis Agents workspace runs in a dedicated KVM virtual machine with an encrypted data disk, its own network, and outbound access denied by default except to allowed destinations. | Administrative access to the hypervisor remains technically possible for operations and incident response. |
| Memory | Short-term working memory stays in the virtual machine. Durable Savantis memory is a separate central service, scoped by account and available to Savantis client applications authorized for that account. | Durable-memory separation is logical and identity-based; it is not a separate virtual machine per account. |
| AI inference | Models you connect follow the chosen provider's rules. Managed inference goes through the private Savantis router to Savantis capacity or a third-party provider. | Depending on the authorized route, a request may be processed in Canada, the United States, China, or an unestablished jurisdiction. Routes involving China or provider training require separate, withdrawable consents. |
| Payments | Stripe processes payments and subscriptions. | Savantis never holds your card number. |
| Metering | The control plane holds accounts, subscriptions, consents, and aggregate usage counters. | It does not receive conversation text, responses, or tool arguments. |
| Backups | Infrastructure backups may be run for operational continuity. | No RPO, RTO, backup schedule, or individual restoration is guaranteed. |
Data journey
| Data | Purpose | Recipient or location | Publicly stated retention |
|---|---|---|---|
| Email and identity proof | Sign-in and account binding | Google Identity Platform, then the Savantis control plane | For the account relationship and applicable obligations |
| Subscription, billing address, and transaction | Payment, taxes, fraud prevention, and accounting | Stripe and the Savantis control plane | Under applicable tax periods, generally six years for required records |
| Conversations, files, browser, configured secrets, and local short-term memory | Run your agents | The workspace's dedicated KVM virtual machine | While the workspace exists; an inactive Discovery workspace is deleted after seven full days |
| Durable Savantis memory | Recall context across clients and workspaces | Central Savantis Memory service, scoped by account | Until you erase it or the account is deleted, subject to temporary operational copies |
| Prompts, responses, and tool arguments sent to a model | Produce a response or perform a task | A provider you connect or an authorized managed-inference route | Under the recipient provider's policy; the Savantis router does not log their content |
| Aggregate counters | Quotas, usage billing, and capacity | Savantis control plane | 24 months by default |
| Technical logs without message bodies | Security, diagnosis, and availability | Savantis infrastructure | 90 days by default |
What Savantis does not claim to hold
- no SOC 2, ISO 27001, HIPAA, or PCI DSS certification;
- no government Authorization to Operate (ATO);
- no guaranteed service level, RPO, or RTO;
- no promise that every model or processing operation remains in Quebec or Canada.
Deferred work and declared limits
The following items are not represented as complete: a privacy impact assessment for every communication outside Quebec, processing agreements with all relevant providers, a complete internal privacy-governance policy, and review of the corpus by Quebec counsel. The operator's current decision is to defer this work until the Service generates material revenue. No schedule or future compliance is promised here.
The operator is a sole proprietorship run from a home. To reduce a physical safety risk, the residential address and personal telephone number are not published. Direct disclosure can be arranged by writing to support@savantisai.com, subject to a reasonable confidentiality agreement. This choice does not satisfy the automatic pre-contract disclosure required by section 54.4 of the Consumer Protection Act, and Savantis does not claim otherwise.
Questions and requests
Write to support@savantisai.com for general questions or support@savantisai.com to exercise a right concerning your personal information. Other operator contact details are available through direct contact, subject to the limit explained above.