Security & Trust
How Langkast protects your organization's conversations, files, and account data.
Encryption
All data is encrypted in transit and at rest. Traffic to and from Langkast is protected with TLS, and stored data — conversations, files, and account records — is encrypted at rest.
Training
Your data is never used to train models: Langkast never uses your prompts, files, or conversations to train any model we build. When you send a message, the relevant content is routed to the AI model provider you selected so that provider can generate a response; that provider’s handling of the request is governed by its own terms, and we do not control its independent training practices.
Tenant isolation
Access to customer data is tenant-scoped by default at the schema layer, and fails closed: a query made without a tenant context is rejected rather than allowed to run unscoped. A resource-level access control list then decides which records within that tenant a given user can see.
Your data rights
Deletion is a single operation that cascades across all four datastores we use to serve your account — the database, object storage, the retrieval vector store, and the search index — so a deletion request removes your content everywhere it lives, not just from the primary record. Individual conversations can be exported as markdown or JSON directly from the chat interface.
Practices
Langkast is built to SOC 2 practices and aligned with GDPR requirements for data handling, retention, and subject rights.
Subprocessors
We share data with a limited set of subprocessors who help us operate Langkast. The full list, and how we use it, is also published in our Privacy Policy.
| Subprocessor | Purpose |
|---|---|
| Hosting and database | infrastructure providers that run our application and store your data. |
| Model gateway (OpenRouter) | routes requests to AI model providers on your behalf. |
| Email (Resend) | transactional email delivery, such as password resets and account notifications. |
| Analytics (PostHog) | product usage analytics and session replay, configured to mask sensitive input fields and text by default. |