Security and privacy, by design.
Tadata plugs into the tools your team already uses, so we hold your data and credentials to the standard that access demands. Here's exactly how we protect them, in plain language.
You're in control
You decide which tools Tadata connects to, and you can revoke any connection at any time. When you do, Tadata's access ends immediately.
Credentials the model never sees
Your credentials live in an encrypted vault (HashiCorp Vault, backed by AWS KMS). They're attached server-side only at the moment a tool runs, so the AI model never sees them. Revoke a connection and the stored credentials are deleted.
Encrypted in transit and at rest
Your data is encrypted with AES-256 at rest and TLS in transit, running entirely on AWS infrastructure in the United States.
Scoped to your organization
Your data, credentials, connections, and agents are scoped to your organization and never shared across customers. Every agent run executes in an isolated, ephemeral container that's destroyed when the work is done.
Never used to train AI
Tadata does not train AI models on your data. We use Anthropic and OpenAI models for agent reasoning, tool use, and composing Slack replies, all under API terms that prohibit training on your data.
Access follows the person
For personal connectors like Gmail, each teammate connects their own account, so Tadata only ever sees what that person can see. Team-wide connectors, like enrichment providers, can be shared, and you control how they're set up.
Only the channels you invite it to
Tadata sees only the channels it's invited to. The messages you send it, and their thread context, are stored as conversation history. Slack access tokens live in the same encrypted vault and are deleted when you uninstall Tadata from your workspace.
Subprocessors
We work with a small, vetted set of subprocessors to run Tadata.
| Subprocessor | Purpose |
|---|---|
| AWS | Hosting and infrastructure |
| Anthropic | AI models |
| OpenAI | AI models |
| Clerk | Authentication |
| Stripe | Billing |
Questions we hear from customers
Which AI models does Tadata use?
Tadata uses models from Anthropic and OpenAI for agent reasoning, tool use, and composing replies in Slack. All usage falls under API terms that prohibit training on your data.
Where is my data stored?
All data is hosted on AWS infrastructure in the United States, encrypted with AES-256 at rest and TLS in transit.
Do you use my data to train AI models?
No. Tadata never trains models on your data, and our model providers are contractually prohibited from doing so under their API terms.
What permissions does Tadata need in Slack?
Tadata only sees the channels it's invited to. It reads the messages you send it along with their thread context, which are stored as conversation history. Its Slack access tokens are kept in our encrypted vault and deleted when you uninstall Tadata from your workspace.
How do you handle security for enterprise teams?
Every organization's data, credentials, connections, and agents are isolated from one another. Agent runs happen in ephemeral containers, credentials stay in an encrypted vault the model never sees, and access can be revoked at any time. Tadata has also passed Google's CASA Tier 2 security assessment.
What data does Tadata store?
Your conversation history (the messages you send Tadata and their thread context), your connection configuration, and your credentials, which are encrypted. Revoking a connection deletes its credentials, and uninstalling deletes your Slack tokens.
Have a security or compliance question?
We're happy to walk your team through any of this in more detail.
Email hello@tadata.com