Security & data handling
What happens to the data you load.
Every statement on this page describes how Labs works today. Items marked To confirm or Planned are not yet in place and are listed so that nothing is implied.
Where it runs
| Item | How it works | Status |
|---|---|---|
| Processing | The Labs service runs on Vercel in Frankfurt, Germany (region fra1). | Live |
| Workspace records | Configuration, column profiles, findings, the report and the audit log are kept in a managed PostgreSQL database (Neon). | Live |
| Database region | The region of the PostgreSQL database. | To confirm |
| Uploaded files and tables | Stored in a separate directory and DuckDB file for each workspace on the processing service. | Live |
| Backups | Backup and point-in-time recovery of workspace records follow the database provider's defaults. | To confirm |
Who can see it
| Item | How it works | Status |
|---|---|---|
| Workspaces | Only the account that created a workspace can open it. Data is never pooled across workspaces. | Live |
| Share links | Read-only links to the report, valid for 1 to 90 days and revocable at any time. | Live |
| Passwords | Stored as salted PBKDF2-SHA256 hashes with 120,000 iterations. | Live |
| Queries you write | Run on a read-only connection with file and network access switched off. | Live |
| Database connections | PostgreSQL sources are attached read-only for one snapshot; the connection string is not stored. | Live |
| Single sign-on, roles and permissions | Not available yet. | Planned |
Language models
Labs calculates every figure in SQL. Language models are optional and are never used to calculate or to decide.
| Feature | What is sent | Status |
|---|---|---|
| Column-meaning review (03 Profile) | Off by default and switched on per workspace, with the choice recorded in the audit log. Sends column names, profile statistics and up to six masked sample values per column (letters and digits replaced, emails reduced to their domain ending). Whole rows and files are never sent. Provider: Mistral AI. | Live, opt-in |
| Report drafting (07 Report) | Sends the client and workspace names and the titles and figures of confirmed findings, when someone asks for a draft. Provider: Anthropic. Not switched on in this deployment. | Not enabled |
| Training | Workspace data is never used to train, fine-tune or evaluate any model. | Live |
Retention and deletion
| Action | What is deleted | What is kept |
|---|---|---|
| Close & purge (08) | Uploaded files, DuckDB tables and write-ahead logs. | Findings with their queries and results, column profiles, metric definitions, the report and the audit log, until the workspace is deleted. |
| Delete workspace | Everything above, including the workspace record in the database. | Nothing in Labs. Provider backups expire on the provider's schedule. |
Providers
| Provider | Purpose | Data |
|---|---|---|
| Vercel | Hosting and processing (Frankfurt) | All Labs data while it is processed |
| Neon | Managed PostgreSQL for workspace records | Workspace records described above |
| Mistral AI | Optional column-meaning review | Only when switched on, as described above |
| Anthropic | Optional report drafting (not enabled yet) | Only when requested, as described above |
| Vercel Web Analytics | Website page counts, only if you accept analytics | No cookies, no cross-site identifiers |
Agreement and contact
A data-processing agreement is signed inside each workspace before any data can be loaded. For questions, data requests or a copy of the agreement, write to hello@16-62.co.