Customer content is encrypted in transit and at rest, hosted in the European Union, and never used to train AI models. Production access is limited to a small set of authorised engineers and is logged.