> ## Documentation Index > Fetch the complete documentation index at: https://ara-90a60a07.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Security, privacy and your data > Short answers to the security and data questions people ask most, and where to find the full detail. This page answers the common questions in a line or two and points to where the full answer lives: * [Privacy Policy](https://reasonmachines.com/privacy-policy): what we collect, how long we keep it, and your privacy rights. * [Terms of Service](https://reasonmachines.com/terms-of-service): ownership, acceptable use, and responsibility for what agents do. * [Trust center](https://trust.reasonmachines.com): security controls, policies, compliance reports and our subprocessors. The Privacy Policy and the Terms are binding. Where this page differs, they win. ## Your data ### Who owns my code and content? You do. Reason claims no ownership of it (**Intellectual Property** in the [Terms](https://reasonmachines.com/terms-of-service)). ### Do you train AI models on my code? No. Reason does not train AI models on your code, prompts or Sessions, and the model providers we use do not train on it either. ### Where does my data go? Reason stores what a Session needs to run and resume. Each turn sends the context it needs to the model you picked. Commands run on the computer the Session uses, and connected services see only what the agent does in them. For the list of subprocessors, see the [Trust center](https://trust.reasonmachines.com). ### How long do you keep it, and how do I delete it? Until you delete it, apart from a few records that expire on their own (**Retention** in the [Privacy Policy](https://reasonmachines.com/privacy-policy)). Delete your account in account settings, or on the [account deletion page](https://reasonmachines.com/delete-account) if you cannot sign in. ## Who can see it ### Who in my Workspace can see my Sessions? Sessions of your main Reason are yours alone. A shared Reason's Sessions are visible to the people it is shared with. See [Workspaces and sharing](https://ara-90a60a07.mintlify.site/docs/workspaces.md). ### Can Reason staff see my data? No one at Reason can sign in as you or open your Workspace. For support inside your Workspace, invite our support address as a member yourself. The narrow, logged exceptions are listed under **Local and Cloud Processing** in the [Privacy Policy](https://reasonmachines.com/privacy-policy). ### How are my secrets protected? They are encrypted, never shown again after you save them, and decrypted only for the run that uses them. See [The Vault](https://ara-90a60a07.mintlify.site/docs/vault.md). Put secrets in the Vault, never in chat. ## How Reason is protected ### How are cloud computers isolated? Each cloud computer is its own virtual machine in one Workspace, and its outbound traffic goes through an allowlist ([network policies](https://ara-90a60a07.mintlify.site/docs/network-policies.md)). ### What can Reason do on my own computer? Work only in the folders you grant, with your user permissions ([Computers](https://ara-90a60a07.mintlify.site/docs/build/computers.md#what-your-computer-exposes)). ### What can the agent do in my connected services? Only what both the permission you granted and your instruction allow. Disconnecting stops future access but does not undo past actions (**Connected Services** in the [Terms](https://reasonmachines.com/terms-of-service)). ### How do API keys work? Each key belongs to one Workspace and carries only the scopes chosen when it was made ([Authentication and scopes](https://ara-90a60a07.mintlify.site/docs/build/auth-and-scopes.md)). ## Compliance and contact ### Do you offer SOC 2, HIPAA and zero data retention? Yes, on [Enterprise](https://ara-90a60a07.mintlify.site/docs/plans.md#enterprise): SOC 2, HIPAA, zero data retention with model providers, and our compliance certificates and reports. To set it up, email [contact@reasonmachines.com](mailto:contact@reasonmachines.com) or talk to us in your [shared Slack channel](#how-do-i-reach-you). ### How do I reach you? Email [contact@reasonmachines.com](mailto:contact@reasonmachines.com). Every paying workspace also gets a Slack invite to a shared channel with our team, sent automatically. ### Subprocessors, DPA or a security questionnaire? Go to the [Trust center](https://trust.reasonmachines.com). For anything it does not cover, email [contact@reasonmachines.com](mailto:contact@reasonmachines.com). ### How do I report a vulnerability? Email [contact@reasonmachines.com](mailto:contact@reasonmachines.com) with steps to reproduce, and leave out real secrets ([security.txt](https://reasonmachines.com/.well-known/security.txt)). This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.