Trust Center

Security and tenant isolation

• Customer workspaces are logically isolated and tenant-scoped services are checked automatically.
• Workspace and module permissions restrict who can view records, change settings, manage integrations, and approve work.
• Human sessions use signed secure cookies. Passwords and customer API keys are stored as hashes.
• Customer-controlled integration credentials use authenticated encryption when stored.

AI control and accountability

• AI Employees use the same workspace permissions and business services as the people they assist.
• Sensitive or destructive work requires confirmation, and workspace owners can require confirmation for every AI mutation.
• AI-generated recommendations do not replace human decisions in employment, finance, healthcare, legal, or other regulated work.
• Tool use, confirmations, proposals, and completed actions leave records that authorized workspace administrators can review.

Audit and data lifecycle

• Workspace administrators can review and export the workspace audit trail.
• Audit records are protected against ordinary application updates and deletion, subject to defined retention and privacy procedures.
• Authorized customers can request workspace data exports and account deletion from workspace settings.
• Workspace deletion includes a recovery window before permanent removal. Some security, billing, and legal records may be retained where required.

Availability and recovery

• Hosting, database, storage, and application telemetry support incident investigation and service recovery.
• Backup restore, incident response, access control, and vendor-management procedures are maintained internally.
• Availability commitments and service credits apply only when stated in a signed agreement.
• Current service notices and support paths are published on the Status and SLA pages.

Privacy and vendors

• The Privacy Policy explains what personal data Saga Sprint processes and why.
• The Data Processing Agreement describes controller and processor responsibilities for business customers.
• The Subprocessors page lists platform vendors, optional AI providers, and customer-connected services.
• AI provider processing depends on the provider and connection selected by the customer. The Subprocessors page identifies the providers Saga Sprint can use.

Assurance and procurement

Saga Sprint provides evidence-backed security and privacy information for customer review. Certifications or regulatory compliance are not claimed unless independently obtained and expressly stated.

Security and procurement questions: security@sagasprint.com. Privacy and DPA questions: privacy@sagasprint.com.