Privacy
What we hold, why, and for how long.
This page states what the product actually does today. It has not been reviewed by counsel and is not yet a contract. For a data-processing agreement you can sign, get in touch.
- Our role
- For your employees' data, your company is the controller and we are the processor. That means your company decides what the data is for, and we process it on your instructions.
- What we hold
- What your company enters into the apps it uses; account data, being names, email addresses and roles; and an audit trail of who signed in and who changed what. We do not buy data from third parties.
- AI models
- Customer data is not used to train models, ours or anybody else's. Sage sends passages to a model provider only when somebody asks a question, and only passages that person was already allowed to read.
- Export and deletion
- Your company can ask for an export of its data, and can ask for deletion. Deletion means deleted across all thirteen services, not hidden from a view.
- Incidents
- If your data is exposed, we tell you. That obligation arrives with the first customer, not with the first request to honour it.