We never view users' individual data without explicit permission (E.g. we are helping a user trouble shoot, and they give an Engineer direct permission to access a tome for that reason).

Regarding Tome's security in general, Tome relies on the authentication expertise provided by Stytch to ensure that only authenticated and authorized users can login and access data. This includes logins, org memberships, and roles for role-based access control.

Your data is always encrypted by HTTPS when traveling across the public internet. We rely on AWS to host our systems and manage our infrastructure and data. We follow AWS guidelines on best practices to protect these systems.

Regarding sharing of data, we don't share user data with an LLM except for when it's necessary to execute prompts, and those prompts are anonymized and deleted after 30 days.

If you'd like to consult our privacy notice, here is a link: https://tome.app/tome/tome-privacy-notice-cl0h7a3qd3476914n6f4jpf2gnd

Can employees at Tome look at my data?

A select handful of engineers may access your workspace from time to time to help you troubleshoot any issues or bugs you report. We will not do so without your explicit permission. All accesses are logged to prevent abuse since non-authorized access is a fireable offense.