### Documentation

Get started

- [Surfaice documentation](/docs/ai)

- [What is Surfaice?](/docs/concepts/what-is-surfaice/ai)

- [Quickstart](/docs/quickstart/ai)

- [Start by role](/docs/guides/start-by-role/ai)

- [Sign in and SSO](/docs/guides/sign-in/ai)

Guides

- [Workspaces](/docs/guides/workspaces/ai)

- [Connectors](/docs/guides/connectors/ai)

- [Chat with Hugo](/docs/guides/chat-with-hugo/ai)

- [Skills](/docs/guides/skills/ai)

- [Working with Hugo](/docs/guides/working-with-hugo/ai)

- [Punch Walk Guide](/docs/guides/punch-walk/ai)

- [Lease abstraction](/docs/guides/lease-abstraction/ai)

Use cases

- [Use cases overview](/docs/use-cases/overview/ai)

- [Teams & personas](/docs/use-cases/by-team/ai)

- [Lease administration](/docs/use-cases/lease-administration/ai)

- [CAM reconciliation](/docs/use-cases/cam-reconciliation/ai)

- [Store development](/docs/use-cases/store-development/ai)

- [Construction & closeout](/docs/use-cases/construction-and-closeout/ai)

- [Portfolio & renewals](/docs/use-cases/portfolio-and-renewals/ai)

- [Operations & facilities](/docs/use-cases/operations/ai)

Skills library

- [Skills library](/docs/skills/ai)

- [Lease & portfolio skills](/docs/skills/lease-and-portfolio/ai)

- [Store development skills](/docs/skills/store-development/ai)

- [Estimating & bid skills](/docs/skills/estimating-and-bids/ai)

- [Reporting & briefing skills](/docs/skills/reporting/ai)

- [Apps & automations](/docs/skills/apps-and-automations/ai)

- [Workspace admin skills](/docs/skills/workspace-admin/ai)

Concepts & trust

- [Permissions](/docs/concepts/permissions/ai)

- [Data handling](/docs/concepts/data-handling/ai)

- [Agent limitations](/docs/concepts/hugo-limitations/ai)

- [Trust FAQ](/docs/concepts/trust-faq/ai)

- [Audit trail](/docs/concepts/audit-trail/ai)

Help

- [FAQ](/docs/faq/ai)

- [Release notes](/docs/release-notes/ai)

- [Security overview](/docs/security/ai)

- [Support](/docs/support/ai)

- [Status](https://status.surfaice.pro)

- [Security](/security/ai)

- [Open app](https://agent.surfaice.pro)

Get started

- [Surfaice documentation](/docs/ai)

- [What is Surfaice?](/docs/concepts/what-is-surfaice/ai)

- [Quickstart](/docs/quickstart/ai)

- [Start by role](/docs/guides/start-by-role/ai)

- [Sign in and SSO](/docs/guides/sign-in/ai)

Guides

- [Workspaces](/docs/guides/workspaces/ai)

- [Connectors](/docs/guides/connectors/ai)

- [Chat with Hugo](/docs/guides/chat-with-hugo/ai)

- [Skills](/docs/guides/skills/ai)

- [Working with Hugo](/docs/guides/working-with-hugo/ai)

- [Punch Walk Guide](/docs/guides/punch-walk/ai)

- [Lease abstraction](/docs/guides/lease-abstraction/ai)

Use cases

- [Use cases overview](/docs/use-cases/overview/ai)

- [Teams & personas](/docs/use-cases/by-team/ai)

- [Lease administration](/docs/use-cases/lease-administration/ai)

- [CAM reconciliation](/docs/use-cases/cam-reconciliation/ai)

- [Store development](/docs/use-cases/store-development/ai)

- [Construction & closeout](/docs/use-cases/construction-and-closeout/ai)

- [Portfolio & renewals](/docs/use-cases/portfolio-and-renewals/ai)

- [Operations & facilities](/docs/use-cases/operations/ai)

Skills library

- [Skills library](/docs/skills/ai)

- [Lease & portfolio skills](/docs/skills/lease-and-portfolio/ai)

- [Store development skills](/docs/skills/store-development/ai)

- [Estimating & bid skills](/docs/skills/estimating-and-bids/ai)

- [Reporting & briefing skills](/docs/skills/reporting/ai)

- [Apps & automations](/docs/skills/apps-and-automations/ai)

- [Workspace admin skills](/docs/skills/workspace-admin/ai)

Concepts & trust

- [Permissions](/docs/concepts/permissions/ai)

- [Data handling](/docs/concepts/data-handling/ai)

- [Agent limitations](/docs/concepts/hugo-limitations/ai)

- [Trust FAQ](/docs/concepts/trust-faq/ai)

- [Audit trail](/docs/concepts/audit-trail/ai)

Help

- [FAQ](/docs/faq/ai)

- [Release notes](/docs/release-notes/ai)

- [Security overview](/docs/security/ai)

- [Support](/docs/support/ai)

- [Status](https://status.surfaice.pro)

- [Security](/security/ai)

- [Open app](https://agent.surfaice.pro)

# Data handling

What Surfaice persists, what stays ephemeral, and how model providers are used.

## Persistence model

Surfaice assembles context at run time for a task. It does **not** keep a general-purpose copy of your document repositories.

**Skills** are named workflows the agent (Hugo) can run; **workspace configuration** includes which skills and instructions your company enabled. New here? See [What is Surfaice?](/docs/concepts/what-is-surfaice/ai).

### What typically persists

- Accounts and user identity

- Encrypted connection tokens

- Workspace configuration, skills, and instructions

- [Audit and agent-run logs](/docs/concepts/audit-trail/ai)

- Content a user deliberately saves (for example an accepted lease abstract moved into workspace memory)

### What Surfaice is not storing as a product default

- Bulk copies of mailboxes

- A mirror or sync of SharePoint or your DMS

- A general-purpose lake of customer documents

- Customer data used to train any model (ours or a vendor's)

## Hosting and isolation

- Each customer gets a dedicated, isolated environment with its own database

- Hosted on Google Cloud Platform in US regions

- Encrypted at rest and in transit

## Model providers

Inference may use commercial agreements with providers such as Microsoft Azure OpenAI, Google Gemini, and Anthropic, under zero-retention / no-training contractual terms for customer content as described on our [security page](/security/ai).

## Authoritative security summary

For subprocessors, compliance status, and the NDA security package, use:

- Public summary: [surfaice.pro/security](/security/ai)

- Docs page: [Security overview](/docs/security/ai)

Do not treat marketing blog posts as the source of truth for security questionnaires.

- [Permissions Previous](/docs/concepts/permissions/ai)

- [Agent limitations Next](/docs/concepts/hugo-limitations/ai)