Data residency

Where your data lives, what stays in your region, and what leaves it.

Your organization chooses a data region when it's created, and you can see it any time under Settings. It is not a stored preference: it decides where your infrastructure physically runs.

What stays in your region

Organizations on a region-pinned plane (Cloudheavy) keep everything at rest inside the region:

• Files you push through the Data Tunnel
• Your knowledge graph in RecursiveDB
• Agent working state and artifacts

Storage is created with the region restriction enforced by the provider, not by convention. Your data is never mixed with another tenant's: every organization has its own isolated data plane inside its private inference cloud.

What leaves your region

We say this plainly rather than burying it: model inference is processing, not storage. A request to a model travels through the Gateway to the model's provider and the response comes back. Nothing from that exchange is stored outside your region, and your model policy controls exactly which providers your organization is allowed to reach. Many teams in regulated markets run with a provider allowlist; ask us and we'll set one for your organization.

Leaving

Your data is yours. On termination we export everything in open formats (your original files plus the graph as a database file) and delete our copy. This is a standing commitment, not a negotiation.