Trust & Security
We index your data. Raw content stays in place.
Mantle is a derived-knowledge index, not a copy of your data. This page is written for security reviewers. Forward it freely.
The data boundary, precisely
What Mantle stores
- Entities, relationships, and facts derived from your sources
- Embeddings and summaries
- Source references (IDs, links)
- Permission mappings per fact
What Mantle never stores
- Raw files or attachments
- Full message or document bodies
- Source credentials in plaintext (tokens encrypted, AES-256-GCM)
Source content is fetched on demand at query time and never persisted. Disconnect a source and its derived knowledge is purged.
Architecture in one paragraph
Connectors read your systems in place over OAuth with the minimum scopes required. An extraction pipeline derives typed entities, relationships, and time-stamped facts into a tenant-isolated store; a knowledge graph is projected from those facts and can be rebuilt from them at any time. Agents query over MCP or REST; every read is filtered by tenant and by the source permissions of the requesting principal.
Controls
Tenant isolation
Every query is filtered by tenant_id at the database layer. 60+ automated cross-tenant tests run on every commit.
Permissions
Source ACLs (Drive sharing, Slack membership, mailbox ownership) are mapped to every fact and enforced at read time.
Encryption
TLS 1.2+ in transit. Encryption at rest. OAuth tokens are envelope-encrypted; API keys are stored as salted hashes.
Audit
Operator actions are logged. Agent read-audit is on the roadmap (ask us for timing).
Deletion
Tenant deletion and per-source purge, including derived knowledge. GDPR erasure supported.
Backups & recovery
Point-in-time recovery on the canonical store; graph snapshots. Restore procedures tested.
Compliance
SOC 2 Type II
In progress. Report available under NDA in Q3 2026.
DPA
Standard DPA available. /dpa
Subprocessors
Microsoft Azure (hosting), Anthropic (extraction inference), Google (embeddings), Stripe (billing). Full list with regions on request.
Data residency
Hosted on Azure. Regional options on Enterprise.
Deployment options
Cloud
DefaultMulti-tenant, isolated per tenant as described above.
VPC
EnterpriseThe full engine inside your cloud account; source bytes never transit our infrastructure.
Air-gapped
On requestIsolated install using customer-hosted models (Claude on Bedrock or Vertex).
Your data and AI models
We do not train models on your data. Extraction inference runs against commercial model APIs under zero-retention enterprise terms.
Questions: security@mantleai.dev