Security and privacy

What experts see

The question, company, product and context. Never metadata, your identity or workspace, or your other requests.

What is blocked

Every question and context, including custom keys, is screened before it reaches experts. The company you name as the subject is research, shown to experts on purpose. Screening blocks everything else that identifies a person or a third party: personal data, patient information, and the names of your own customers, prospects or counterparties when they are not the subject. A request that contains them is rejected with 422 context_blocked, naming the field. Don't send protected health information; this API is not for HIPAA-covered data.

Reuse

Answers you commission are reused only within your workspace. GET /answers/search returns only answers your workspace can see.

Retention and deletion

Retention periods for requests, answers, transcripts and recordings are set per workspace; ask us for your terms. Delete a request removes the request, its context, its answers and any transcript or recording for your workspace. The expert's own copy of their answer is not affected.

Security

• TLS 1.2 or higher on every call, and data encrypted at rest.
• Several API keys per workspace, each scoped to read, write and/or billing. Rotate or revoke keys in the Synquery app. Keys never appear in responses or logs.
• An audit log of every request, key use and key change, per workspace, in the Synquery app and exportable.

Contracts

A data processing agreement and our subprocessor list are available on request. Talk to us.