> ## Documentation Index
> Fetch the complete documentation index at: https://docs.thecontextcompany.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security and privacy overview

> How The Context Company handles production agent data: what is collected, how it is protected, and the controls available to your team.

The Context Company processes production agent interactions, which can include sensitive user content, tool arguments, and results. This page summarizes what is collected, how it is protected, and where to find deeper detail.

## What is collected

For every run you send, the platform stores the fields listed on the [What TCC captures](/what-tcc-captures) page: prompts, responses, model calls, tool calls, arguments and results, errors, latency, tokens, cost, user and organization identifiers you attach, feedback, and any custom metadata.

Sensitive fields you don't want stored can be redacted at ingest (see [PII redaction](/security/pii-redaction)) or excluded from the metadata you send in the first place.

## Data security

* **Encryption in transit.** All ingest and API traffic is served over TLS.
* **Encryption at rest.** Stored data is encrypted at rest.
* **Tenant isolation.** Data is isolated per organization. Your traces are never mixed with other customers' data.
* **Access control.** Access is scoped by API key (dev / prod / dev+prod) and by dashboard membership.

For anything not covered here or in the linked pages, see our [Privacy Policy](https://www.thecontextcompany.com/legal/privacy-policy) or contact [support@thecontextcompany.com](mailto:support@thecontextcompany.com).

## PII redaction

PII redaction runs at ingest, before data reaches storage or search indexes. Detected values are replaced with category placeholders (`[EMAIL]`, `[SSN]`, `[CREDIT_CARD]`, `[IP_ADDRESS]`, `[PHONE]`, `[API_KEY]`). Available on the Enterprise plan.

See [PII redaction](/security/pii-redaction) for the full list of categories, examples, and limitations.

## Data export and deletion

For data export or deletion requests, contact [support@thecontextcompany.com](mailto:support@thecontextcompany.com). See [Data privacy](/security/data-privacy) for policy links.

## Cookie consent

Users located in the EU, EEA, or UK see a cookie consent banner on their first visit. Analytics tracking is disabled by default for these users until they explicitly accept.

## Related

<CardGroup cols={2}>
  <Card title="What TCC captures" icon="database" href="/what-tcc-captures">
    The full list of fields stored per run.
  </Card>

  <Card title="PII redaction" icon="user-shield" href="/security/pii-redaction">
    Redact sensitive fields at ingest.
  </Card>

  <Card title="Data privacy" icon="shield-halved" href="/security/data-privacy">
    Policy, export, and deletion.
  </Card>

  <Card title="Contact" icon="envelope" href="/contact">
    Ask us about anything else.
  </Card>
</CardGroup>