Compiled does not collect, store, or process your communications, agent actions, or regulated data. The product runs entirely inside your environment. We collect standard account and contact information (name, email, organization) for the purposes of providing the service, billing, and support.
Antibodies run in your own tenant. Communications and agent actions are inspected locally and are never transmitted to Compiled's infrastructure. This is a structural property of the architecture, not a policy commitment. The only outbound traffic is refined antibody updates — not data.
Because the inspection engine runs in your environment, your data residency requirements are determined by your own infrastructure choices. Compiled does not impose or create new data-residency obligations.
Compiled's architecture is designed to support GDPR-aligned data processing. HIPAA Business Associate Agreements (BAAs) are available for healthcare customers. Architecture and data-handling documentation is available under NDA.
For privacy questions or requests, contact us at sales@compiled.co.