How we look after your data.

Your questions

• Where does our data live?

  Our services run on Railway. Your data goes into a database of its own, and your hosting option decides where that database runs. With Yarlis Hosted it sits on managed Postgres next to our services. With Ring-Fenced it moves to a separate database provider, so the company that hosts our services never holds your data. With On Your Servers, everything runs inside your own cloud account.

• Is our data kept apart from other clients?

  Yes. Every client gets a new database, and nothing in it is shared with anyone else.

• Which AI models see our data?

  The ones that suit each job. Every call goes out through one model router, and we suggest the models for each job. Each model provider sets its own terms on training and retention, and we go through those terms with you first.

• Who else handles our data?

  We build the co-workers ourselves, and they connect to your systems through the APIs those systems already offer. The only other companies involved are Railway, your database provider, the model router and the model providers we agree with you.

• Does your team read our data?

  No. We run the platform, and we don't read what's inside it. If one of us ever opens your content, the platform logs that as its own event, and you can see it.

• What happens when we leave?

  We hand your data back to you, then wipe it from our systems.

• Do you have SOC 2 or ISO 27001?

  Not yet. When an audit starts, this page will say so, with its date.

• Do you have a standard data processing agreement?

  Not yet. Tell us what your review needs and we'll answer it directly.

• How fast will you tell us about a breach?

  Within 48 hours of finding one that affects your data.

• How do we report a security issue?

  Email sales@yarlistech.com and start the subject line with [Important].