Security, retention and limits

Isolation and hosting

One tenant per workspace (OEM and each dealer): separate storage prefixes, row-level isolation, separate encryption context. Google Cloud, asia-east1 by default (EU/US on request). TLS 1.2+ in transit; encryption at rest; Cloud SQL point-in-time recovery.

Retention

Knowledge (manuals, bulletins, catalogues, index) retained for the life of the workspace. Case data (photos, logs, sessions) default 365 days, configurable 90–730. Deletion within 30 days; backups roll off within 35. Usage ledger and audit log 2 years.

Access

SSO (Google, Microsoft) on Network and Enterprise; magic-link email otherwise. Roles: OEM admin, product-line engineer, technician, dealer admin, dealer technician. Our operational access is limited, short-lived and logged.

Model providers

Google Vertex AI (vision-capable) by default via our channel, or your own key. Manual excerpts, photos and session text are sent for the request in hand under enterprise terms that exclude training.

Deliberate limits

• No connection to equipment controls, PLCs or IoT actuation.
• No procedure is returned without a citation; no diagnostics are improvised.
• Safety sequences are verbatim and first; bypass requests are refused.
• Drawings are not geometrically interpreted.
• Does not assert a root cause; it orders checks and cites sources.

Vulnerability reports

[email protected]; acknowledged within two business days.

Policies

Privacy policy, terms, DPA and sub-processor list are published once at carnegieintel.com and apply to this product.