Is my data safe and private on CueCrux?
Encrypted, tenant-isolated, and never used to train models
CueCrux encrypts all data, isolates each tenant completely, and never uses your queries or documents for model training.
Read the full card →Security
VaultCrux Shield
Security controls are presented as operational behavior, not slogans.
Shield modules
- Trust registry: pin and validate trusted server digests.
- Capability firewall: deny by default; explicitly allow safe capability paths.
- Taint engine: tainted content cannot trigger dangerous actions.
- Approval gate: propose, approve, execute with signed receipts.
- Sandbox runner: isolate risky tools during execution.
- UI sandbox: restrict untrusted tool UI behavior.
Tool UI cannot present approvals; only VaultCrux chrome can.
In plain English: if content is tainted or untrusted, it can be read, but it cannot directly trigger dangerous actions.
Data security, explained
Can I search my own private documents?
Upload documents to a private knowledge plane for searching
Private knowledge planes let you add your own documents to the search corpus, fully encrypted and isolated.
Read the full card →
Does CueCrux offer data residency options?
Choose where your data lives to meet regulatory requirements
CueCrux supports configurable data residency, letting organisations specify geographic regions for data storage and processing to comply with data sovereignty regulations.
Read the full card →
What audit logs does CueCrux provide?
Comprehensive activity logging for compliance and governance
CueCrux logs every significant action with user identity, timestamp, and context, providing a tamper-evident audit trail for regulatory compliance.
Read the full card →ATAM User‑Trust
Legal & policy
CueCrux Auth, Trust & Anti‑Manipulation Plan (User‑Trust Edition)
Read the full card →Trust, Safety & Legal FAQ
Legal & policy
Handling of sensitive, political, or geo-specific data aligned to master plans.
Read the full card →