Data map

Every kind of data Remy keeps, who owns it, and what happens when it’s deleted.

View JSON

DataHoldsRetention

Apps35 kinds · Removed when the app is deleted.

App Agent Conversations

The full message history of conversations between people and the app's agents.

Until owner is deleted

Deleted · Backups purge after 28 days

App Agent Traces

A turn-by-turn record of each task agent run, including every model call and its token usage.

90 days

Deleted · Backups purge after 28 days

App Analytics Aggregated Rollups

Traffic totals for the app in five-minute buckets, including the visitor IDs counted in each. These are kept after the raw events are pruned.

Until owner is deleted

Deleted · Backups purge after 28 days

App Billing Events

One billing event per charged call, with its cost and the workspace and person it was billed to.

Until owner is deleted

Kept after deletion. Backups purge after 28 days.

It's part of the workspace's billing history.

App Browser Sessions

The browser sessions the app's code has opened: when, in which world, how each ended and the sites its pages were on, and the reference its user agent carried, which a site's report is traced back by.

Until owner is deleted

Deleted · Backups purge after 28 days

App Cloud IDE Sessions

A record of each cloud IDE session the app was built in: whose it was, when it ran, and the box it ran on.

Until owner is deleted

Deleted · Backups purge after 28 days

App Cloud IDE Snapshots

Snapshots of each person's cloud IDE home directory, which restore their work between sessions, and the Remy agent's usage log. They're deleted once the person hasn't used the cloud IDE in the app for 30 days, or leaves the workspace.

Until owner is deleted

Deleted · Backups purge after 28 days

App Data Migrations

Records of the app's moves to another workspace or storage region, the files each move copied, and any queued work stored while a move is in progress.

Until owner is deleted

Deleted · Backups purge after 28 days

App Data Sources

Documents uploaded or synced into the app's data sources and everything derived from them (extracted text, chunks, embeddings, dictionaries), along with ingest jobs, connectors and evaluation sets.

Until owner is deleted

Deleted · Backups purge after 28 days

App Databases

The app's database files (one set per release) and the list of its databases and their tables.

Until owner is deleted

Deleted · Backups purge after 28 days

App Dedicated Capacity

The app's provisioned vector search capacity, along with its configuration, state history and logs.

Until owner is deleted

Deleted · Backups purge after 28 days

App Email Domains & Sending

The app's sending and receiving domains, its suppression list, and its sending status with the email provider.

Until owner is deleted

Deleted · Backups purge after 28 days

App Email Log

Each email the app sent, with its subject and sender, and one row per recipient with its delivery status.

90 days

Deleted · Backups purge after 28 days

App Feedback Bundles

Diagnostic bundles sent with Send Feedback, containing the dev box's logs and the agent's session.

Until owner is deleted

Deleted · Backups purge after 28 days

App Files

Files the app stores (its own file stores, end-user uploads and step outputs, wireframes), the thumbnails and previews the edge generates from them, and each file's malware and PII scan result.

Until owner is deleted

Deleted · Backups purge after 28 days

App Frontend Errors

JavaScript errors from the app's pages in visitors' browsers, with messages, stack traces and breadcrumbs, and counts in five-minute buckets.

90 days

Deleted · Backups purge after 28 days

App Issues & Reports

Issues opened for the app and their comments, as well as generated security reports and CAIQ security attestations.

Until owner is deleted

Deleted · Backups purge after 28 days

App Jewels

Records from the app's Jewels: each proposal and its results, pairs of what the jewel proposed and what the person did, and a trace of each run.

Until owner is deleted

Deleted · Backups purge after 28 days

App Metadata

The app's main record (name and settings), the custom domains it's served on, and its branch preview links.

Until owner is deleted

Deleted · Backups purge after 28 days

App Method Metrics

Call counts, error counts and durations for each of the app's methods, in five-minute buckets.

Until owner is deleted

Deleted · Backups purge after 28 days

App Model Training

Training runs for models tuned on the app's data, the training datasets, and the resulting model adapters.

Until owner is deleted

Deleted · Backups purge after 28 days

App Phone Numbers

Phone numbers the app leases for its voice agents.

Until owner is deleted

Deleted · Backups purge after 28 days

App QA Recordings

Session replays of the app's pages, recorded in cloud IDE sessions during QA.

30 days

Deleted · Backups purge after 28 days

App Queued Email Bodies

Message bodies for emails waiting to send, deleted once the send finishes.

Per-item expiry

Deleted · Backups purge after 28 days

App Request Log

A record of every call to the app's methods, including the full input, output and console output.

90 days

Deleted · Backups purge after 28 days

App Scheduled Job Runs

One record per scheduled job run: when it started and finished, and whether it succeeded.

90 days

Deleted · Backups purge after 28 days

App Scheduled Jobs

The scheduled jobs declared in the app's manifest, with each job's schedule and status.

Until owner is deleted

Deleted · Backups purge after 28 days

App Scratch Files

Temporary files passed between steps and jobs, and step results too large to return directly, deleted after two days.

Per-item expiry

Deleted · Backups purge after 28 days

App Secrets

Encrypted secret values for the app's code, with separate dev and live values.

Until owner is deleted

Deleted · Backups purge after 28 days

App Source Code & Release History

The app's source code and git history, and each release's build output, dependencies, static site, performance diagnostics and prerendered pages.

Until owner is deleted

Deleted · Backups purge after 28 days

App Usage & Activity Rollups

Usage totals for the app and its sandbox activity, in five-minute buckets.

Until owner is deleted

Kept after deletion. Backups purge after 28 days.

They're part of the workspace's usage history.

App Users

Accounts for people who sign in to the app (email, phone number and roles), with their API keys and OAuth grants.

Until owner is deleted

Deleted · Backups purge after 28 days

App Visitor Analytics

Page views and events from the app's visitors, with referrer, device and city-level location, and visits from crawlers.

90 days

Deleted · Backups purge after 28 days

App Voice Calls

Calls with the app's voice agents, with the caller, full transcript and usage for each, and the voice agent's settings.

Until owner is deleted

Deleted · Backups purge after 28 days

Exported App Assets

Public share links for the app's shareable items, such as its reports, attestations and pitch decks, each with its link preview and the URL of the snapshot it points to.

Until owner is deleted

Deleted · Backups purge after 28 days

Workspaces12 kinds · Removed when the workspace is deleted.

Workspace API & Vendor Keys

The workspace's API keys, and the vendor keys and service settings it has configured, stored encrypted.

Until owner is deleted

Deleted · Backups purge after 28 days

Workspace Audit Log

The workspace's immutable audit trail: who did what, to which resource, from where, and with what outcome.

Until owner is deleted

Kept after deletion · No backups

Each event is locked for a year, and nobody can delete it before then.

Workspace Billing Records

Credit grants to the workspace and its monthly recurring revenue figures, kept for finance reporting.

Until owner is deleted

Kept after deletion. Backups purge after 28 days.

They're part of the workspace's billing history.

Workspace Business Associate Agreement

The workspace's business associate agreements with us: which form, when it took effect, and who signed for the workspace.

Until owner is deleted

Kept after deletion. Backups purge after 28 days.

HIPAA has us keep a business associate agreement for six years after it was last in effect.

Workspace Connected Accounts

Third-party accounts the workspace has connected through OAuth, with their tokens, and any OAuth client credentials it brought.

Until owner is deleted

Deleted · Backups purge after 28 days

Workspace Custom Models

Models the workspace added itself, including custom endpoints and models tuned for its apps.

Until owner is deleted

Deleted · Backups purge after 28 days

Workspace Data Exports

Exports of everything the workspace, or one of its apps, stores, built when an admin asks for one and kept for 7 days to download.

Per-item expiry

Deleted · Backups purge after 28 days

Workspace Metadata & Members

The workspace record (name and settings), its members and pending invitations, its app folders, and its storage region moves.

Until owner is deleted

Anonymized at deletion

Original details in backups purge after 28 days

Workspace Plan

The workspace's plan agreements, granted features, trials and redeemed promotion codes.

Until owner is deleted

Kept after deletion. Backups purge after 28 days.

They're part of the workspace's billing history.

Workspace Registered Domains

Domains the workspace registered through us, their DNS records, and the registrant's contact details (name, address, email, phone).

Until owner is deleted

Deleted · Backups purge after 28 days

Workspace Single Sign-On

SSO setup for the workspace: its identity provider organization, connections and verified email domains.

Until owner is deleted

Deleted · Backups purge after 28 days

Workspace Uploads

Files uploaded at the workspace level, by the workspace or any of its people, including the snapshots behind exported app assets. They stay with the workspace when someone leaves.

Until owner is deleted

Deleted · Backups purge after 28 days

People4 kinds · Removed when the account is deleted.

Account Attribution & Favorites

How a person first arrived (the campaign, referrer and landing page) and the models they marked as favorites.

Until owner is deleted

Deleted · Backups purge after 28 days

Account Metadata

A person's account record: email, name, profile and settings.

Until owner is deleted

Anonymized at deletion

Original details in backups purge after 28 days

Account Profile Picture

The picture on a person's account, whether they uploaded it or it came from their sign-in provider.

Until owner is deleted

Deleted · Backups purge after 28 days