Security is a workflow, not a checkbox.

How we handle your data

• Your VPC by default. The orchestrator, the agents, the vector store — all in your cloud account. We connect via least‑privilege IAM.
• PII redaction as close to the data source as possible. PII (Personally Identifiable Information — names, emails, phone numbers, and similar identifiers) is redacted and replaced with stable placeholders before any prompt leaves your VPC. Reversed only on egress to your own systems.
• Immutable run ledger. Every model call, every tool call, every approval gate, written append‑only with the prompt, the response, the human who approved (if applicable). Retained per your policy.
• Model provider choice. Use your own API keys, your own contracts. We don't proxy. Switching providers is a config change.
• No training on your data. We require zero‑retention on all third‑party model providers. Written into every model contract.

Vulnerability disclosure

Security issues to security@menteflow.io. PGP key on the contact page. We acknowledge within 24h and publish fixes within the standard 90‑day window.