Data handling

AgentTrunk stores versioned skills, prompts, reference files, and associated metadata. Upload only data you are authorized to share.

Keep sensitive data out

Do not upload protected health information (PHI), passwords, or API keys, including in filenames, notes, or prompts. AgentTrunk is not approved for HIPAA-regulated data. These restrictions are not an automated sensitive-data detector.

Version history and copies

Replacing context does not erase earlier versions. Copies retrieved by agents and delivered webhook metadata may exist outside AgentTrunk. Erasure must account for history, indexes, backups, and downstream recipients; removing a current release is not sufficient.

Request a review

Workspace managers can record an access/export or erasure review request under workspace Settings. Requests await manual review; they do not automatically delete or export data. For personal-data requests without workspace access, contact us. Include only enough information to locate your account; do not email sensitive files.

Readiness

This page explains current technical behavior, not a compliance certification. Read our privacy notice and terms of service. Retention schedules, contractual coverage, and verified erasure/export procedures still require completion and review.