> ## Documentation Index
> Fetch the complete documentation index at: https://dev-docs.altrum.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Security and data

> Where Altrum keeps your data, who can see it, and how access is protected.

## Where your data lives

Altrum stores your organization's data in Europe (London).

## Your organization is yours alone

Everything you create in Altrum belongs to your organization: members, AI systems, assessments, guardrails and tickets. Nobody in another organization can see it, and asking for something that belongs to another organization gets the same answer as asking for something that does not exist.

Altrum staff manage organizations and plans. They do not see your assessments or their conversations.

## Access

* Access is by invitation only. Invitation and password reset links work once, and expire after 7 days and one hour.
* Passwords have at least 12 characters. Sign in can also use Google, for an address that already has an account.
* A session ends after 8 hours idle or 7 days at most. Disabling or removing a member signs them out everywhere straight away.
* What each person can see and change follows their role: see [Members and roles](/members-and-roles).

## Secrets

Credentials Altrum holds for your organization are encrypted when stored and are never shown back or written into logs.

## When an organization is switched off

Nobody can sign in, and nothing is deleted. Switching it on again restores access as it was.

## The AI Gateway

<Info>This part is in development. Details may change before it is available.</Info>

* **Provider credentials** you store are encrypted, never shown again, and never logged. See [Provider credentials](/ai-gateway/provider-credentials).
* **Request content** is not kept unless your organization switches content logging on. Kept content is stored after masking, apart from the request record and under your organization only, for 30 days by default (you can choose 1 to 365), and only owners and admins can read it, through a link that expires after two minutes. Request records without content are kept for 13 months. See [Request logs](/ai-gateway/request-logs).
* **Guardrail findings** record what kind of thing was found, never the matched text.
* **A failed guardrail check** stops the request rather than letting unchecked text through. See [Guardrails at runtime](/guardrails/at-runtime).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.