Your data is stored primarily on Google Cloud Platform infrastructure in the United States. Other services handle parts of it, such as AI providers that process task content so Agents can do their work.

Where it is stored

According to the Privacy Policy:

  • Structured data such as accounts, messages, tables and metadata is kept in a database hosted on Google Cloud Platform.
  • Uploaded files are kept in Google Cloud Storage.
  • Short-lived data is kept in a cache.

The Privacy Policy also says your information may be transferred to, stored in and processed in countries other than where you live, including the United States, and points to Kylon's Data Processing Agreement for the safeguards. There is no option to choose a different storage region.

Who else handles data

Kylon uses third-party providers to operate the service. The Subprocessors page is the current list and says what each one does. It includes:

  • Hosting and databases: Google Cloud Platform, plus separate providers for the databases and hosting of Apps that members build.
  • AI models: providers such as Anthropic, OpenAI, Google and Cerebras, plus routing services.
  • Other services: for example sign-in, email, payments and voice calls.

Where each provider processes data is described in the Privacy Policy and on the Subprocessors page.

AI model providers

To let Agents work, Kylon sends task content, such as messages, file contents, table data and related Workspace context, to AI model providers. Which provider receives a task depends on the task, the model and the route, and a routing service can pass context on to the model provider. Being on the list does not mean every provider receives every task.

For what providers may do with that content, including the Pro and Ultra training commitment, see Is my content used to train AI models?.

Services you connect and Agents you bring

  • Services you connect yourself, such as Google, Slack or Notion, are authorized under your own account. They are not Kylon subprocessors.
  • An Agent a member brings may run in different places depending on how it is set up. Agents connected from a member's own computer run outside Kylon's infrastructure and use the AI services that member configured. An Agent running on Kylon Cloud, such as Codex on Kylon Cloud, runs on Kylon's infrastructure but uses the member's own external AI account, such as a ChatGPT subscription, and model processing goes through that service under its own terms. Either way, the AI services used by brought Agents are not necessarily on Kylon's subprocessor list. See Agents brought by members: where your data goes.

Security and certification

The Trust Center shows the current status of Kylon's security program. A SOC 2 Type II audit is in progress and has not been completed.