- Workspace Areturns nothing
- Your workspacereturns your rows
- Workspace Creturns nothing
Enforced in Postgres, not in application code
Read this first
Three things that may rule us out
If one of these is a hard requirement, you'll know in a minute — not in week six of a procurement process.
No compliance certifications yet
No SOC 2, ISO 27001 or HIPAA attestation, and no BAAs. If your policy requires one, we won't pass.
One data region
Your data is stored in one region and it isn't configurable. Answering also sends content to a model provider.
No SAML single sign-on
Email and password or Google sign-in, with TOTP two-factor. No SAML and no SCIM provisioning.
- Notice before a new subprocessor or a material contract change
- 30days
- Full refund window, for any reason
- 14days
- Cookies or trackers set by this website
- 0
- To acknowledge a vulnerability report
- 3working days
The document set
Grouped by the question you're asking
Every page below is public, dated and written for whoever has to sign it off.
How it's protected
Security
Isolation, encryption and access control, with the mechanism named for each.
/security
Architecture
The request path from a visitor's keystroke to a lead landing in Slack.
/security/architecture
Data residency
Where each part of your data lives, and what leaves the region.
/security/data-residency
Compliance
What we hold, what we don't, and what it would take.
/security/compliance
What you sign
Data processing agreement
Binding from sign-up on every plan, with the SCCs and both annexes.
/legal/dpa
Subprocessors
Every third party that may touch customer data, and exactly what each gets.
/legal/subprocessors
Privacy policy
What personal data is processed, why, and for how long.
/privacy
Terms of service
The agreement itself — and which document wins when two disagree.
/terms
When something goes wrong
Incidents
What we tell you, how fast, and the history so far.
/security/incidents
Report a vulnerability
Scope, timelines, and our commitment to good-faith researchers.
/security/disclosure
Live status
Hosted separately, so it survives an incident affecting this site.
status.integrable.cloud
Vendor questionnaire
The usual questions, answered in advance — including the noes.
/security/questionnaire
Anything not covered? Write to security@integrable.cloud — a person replies.