Privacy tiers
Your organization sets the ceiling; every member can see the active tier. Engineers always see their own data in full, locally, regardless of tier.
| Tier | What uploads | Typical use |
|---|---|---|
| 1 · Metrics (default) | Counts, durations, models, categories, tool histograms, confidence-banded links to shipped work. No prose. | Day-one default; works-council-friendly deployments. |
| 2 · Summaries | Tier 1 + one-sentence session summaries and capped first-prompt excerpts. | Richer narratives without transcript egress. |
| 3 · Transcripts | Tier 1+2 + tiered transcript turns, encrypted per-org; enables org-wide search. | Teams that want searchable institutional memory; explicit sign-off flow. |
At every tier, the agent redacts credentials before anything leaves the device, and leadership surfaces show patterns and cohorts — not ranked individuals.